Hi,
I am
working on this right now. I think a
hybrid IKE mode is necessary from what I have read, and I am looking into the
use of Certificates too. I will post a
rough-draft of a how-to here when/if I get it working. Otherwise I will just use FWZ.
C:\Mark
-----Original
Message-----
From: Scott Hunter
[mailto:[email protected]]
Sent: Wednesday, January 31, 2001
4:31 AM
To: '[email protected]';
[email protected]
Subject: RE: [FW1] Ike with radius
authentication
Thanks for the response,
but with that configuration, SecuRemote reports that "IKE is not properly
defined for user" and FW1 reports that "User cannot use
IKE". RADIUS works fine for FWZ.
-----Original
Message-----
From: Ilya Akinfiev
[mailto:[email protected]]
Sent: Wednesday, January 31, 2001
12:56 AM
To: 'Scott Hunter'
Subject: RE: [FW1] Ike with radius
authentication
you should turn off both
password and cert auth on ike tab for the generic* usre - the auth tab should
list radius - that's it...
----- Ilya Akinfiev ; Security
Consultant ------
--- SiegeWorks Enterprise Security Solutions ----
---- siegeworks.com ;x 201 ------
-----Original Message-----
From:
[email protected]
[mailto:[email protected]]On Behalf Of Scott Hunter
Sent: Tuesday, January 30, 2001
1:11 PM
To: 'key chavez';
[email protected]
Subject: RE: [FW1] Ike with radius
authentication
I have the same issue. When using
IKE and shared secrets, the User Name is no longer meaningful. I can put
anything in the User Name field in SecuRemote client and the shared secret from
the IKE settings for the "generic*" account and it authenticates
successfully. That appears to override the RADIUS authentication.
Bummer.
-----Original Message-----
From: key chavez [mailto:[email protected]]
Sent: Sunday, January 28, 2001 6:30 PM
To: [email protected]
Subject: [FW1] Ike with radius authentication
How can I make a IKE-VPN using radius
authentication.
Does anybody know if it's possible? Where
can I find
information about this?
Best regards,
Key Chaves
__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices.
http://auctions.yahoo.com/
================================================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================