Re: Cisco PIX 501 and LDAP

[Kjetil Hustveit]

P� 11. jun. 2004 kl. 16.25 skrev Alan DeKok:

Kjetil Hustveit <[EMAIL PROTECTED]> wrote:

The most important one, I guess, is that the pix does
not send the password and the access is of course rejected. My VPN
client works with local users on the pix. Should freeradius be
configured in a way that asks the pix for the password or is it the pix
that is mis-configured? (or even ill-suted for the task)

  The PIX *should* be able to send the passwords to the RADIUS server.

You haven't said what it *is* sending, so there's no way to know more.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

I took som screendumps from ethereal showing the decoded packet, that may help.

This one is from the pix:

Bilde 11.pdf
Description: Adobe PDF document

This one is from radtest and it works

Bilde 10.pdf

Description: Adobe PDF document

Thanks for any help


Regards
Kjetil