[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Problems with fw-1 4.1 sp2 and Cisco ACS radius.
No failed attempt entries on the ACS logs. -----Original Message----- From: Jim Brown [mailto:[email protected]] Sent: 22 January 2001 16:28 To: 'Langa Kentane'; Firewall-1 Mailing List (E-mail) Subject: RE: [FW1] Problems with fw-1 4.1 sp2 and Cisco ACS radius. Are there any entries in the failed attempts log on the ACS server? -----Original Message----- From: Langa Kentane [mailto:[email protected]] Sent: Monday, January 22, 2001 3:20 AM To: Firewall-1 Mailing List (E-mail) Subject: [FW1] Problems with fw-1 4.1 sp2 and Cisco ACS radius. Greetings. I am having a problem with our user/client auth. Everytime someone tries to connect to the internet, they get the auth window and it says radius not responding. You then enter your username and password, bring back the window, after the third time, it gives you: Error 401 FW-1 at Primary: Unauthorized to access the document. Authorization is needed for FW-1. The authentication required by FW-1 for langa1 is: RADIUS. Reason for failure of last attempt: RADIUS servers not responding I have tested the radius server with NTRadping and it responds all the time. I check the secret key between the firewall and the radius server, it's correct. The config on the radius server has not changed since the first time the stuff was installed. The only new software we installed on the ACS box was SecureID stuff. I don't think that is the problem also because after having problems, I put a backup box in place of the ACS box, exact same config, but without the SecureID. The same problem occurs, wich leaves me with one option only, must the the firewall. We recently upgraded from an IP330 to an IP440 3 weeks ago. I have not noticed wether the problem started after that or before that. Please help. I have tried everything that I know, I am total baffled by this problem. Lack of experience maybe? Thanks in advance. __________________________________________________________ Langa Kentane | TEL:Security Administrator | Cell:DISCOVERY HEALTH | http://www.discoveryhealth.co.za __________________________________________________________________ ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|