On 02/27/2013 01:11 PM, Vipan Kapur wrote:
Hello there!

I hope you can help me, I have setup VPN access using the article
http://www.shrew.net/support/Howto_Juniper_SSG but I cannot connect using
the Radius server.  I can only connect if I create a user account on the
firewall, but I don't want to do that for all the users.

The firewall shows the following:

2013-02-27 13:04:26     info    IKE 198.228.192.58: XAuth login failed for
gateway GW-DIALUP-VPN, username v.kapur, retry: 0, timeout: 0.
2013-02-27 13:04:26     warn    Primary 10.50.100.12, backup1 , and backup2
servers failed.
2013-02-27 13:04:26     warn    Active Server Switchover: New requests for
Microsoft server will try Primary from now on.
2013-02-27 13:04:26     warn    Active Server Switchover: New requests for
Microsoft server will try Backup2 from now on.
2013-02-27 13:04:25     warn    Active Server Switchover: New requests for
Microsoft server will try Backup1 from now on.
2013-02-27 13:04:17     warn    Trying primary server 10.50.100.12.

Hi Vipan,

These messages look to me like your Juniper is unable to contact the RADIUS server. I'm assuming "Microsoft server" is your Windows 2008 RADIUS server.

If your device is unable to communicate with the RADIUS server, it obviously would be unable to verify credentials that come from that server.

_______________________________________________
vpn-help mailing list
[email protected]
https://lists.shrew.net/mailman/listinfo/vpn-help

Reply via email to