VPN Authenication problem

[kylesmith]

I have a PIX 515 setup for VPN access for external users. I'm using Win2k pro using pptp and l2tp/ipsec as a VPN client and Win2k server for Radius server. The problem I'm having is I'm getting error "691 -Access denied because username and/or password is invalid on the domain". I know I'm typing in the correct username and password. If I check the Event log on the Radius server it say that access has been granted to the user. can anyone please help

[paqiu]

Hi,

Are you doing PPTP or L2TP with IPSEC ? Because the client end setting is totally different.

Please compare the PIX configuration with following URL:

http://www.cisco.com/warp/customer/110/cvpn3k_pix_ias.html

Also refer from above link for the Microsoft IAS settings.

Best Regards,

Paul Qiu

[kylesmith]

my configuration is very similar to the config in the example. I'm using MSCHAPV1 which is set on Win2k Client and Radius server.