NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Problems with ACE authentication after upgrade to ACE 5 .0





-----Original Message-----
From: Yim Lee [mailto:[email protected]]
Sent: Sunday, August 26, 2001 1:05 AM
To: Greg Polanski; Firewall One List
Subject: Re: [FW1] Problems with ACE authentication after upgrade to ACE
5.0



Greg,

Can you get to your ace box through more than one nic?
 One way to troubleshoot this is to delete the client
and see what source ip address that the fw used to
access the ace box.  Then use this ip address to build
the client.

Yim
--- Greg Polanski <[email protected]> wrote:
> 
> I just upgraded to ACE 5.0 from ACE 3.3.1 and not
> cannot
> authenticate SecuRemote !!
> 
> In the past, I used the tool,  
> /opt/ace/prog/sdshell,
> to get the node secret and validate the node naming.
> I am doing the same thing now.
> 
> 1.	When I authenticate for the first time,
> everything is OK
> 
> 08/24/2001 09:28:21U polansg/diamond1.adc.com       
>/Greg Po
> 08/24/2001 04:28:21L Passcode accepted              
>   nyland.adc.com
> 
> 08/24/2001 09:28:23U polansg/diamond1.adc.com       
>   ---->/
> 08/24/2001 04:28:23L Node secret sent to agent host 
>   nyland.adc.com
> 
> 2.	When I repeat the test case, the ACE server does
> not 
> 	want to validate anything about the node.
> 	Yet when I run this on a non-firewall (single NIC)
> Sun
> 	box, sdshell can be used again and again
> 
> 08/24/2001 09:32:12U --------/diamond1.adc.com      
>   ---->/
> 08/24/2001 04:32:12L Node verification failed       
>   nyland.adc.com
> 
> 
> Can you help me out?
> 
> greg
>  
>
_______________________________________________________________
> Greg Polanski                   
> mailto:[email protected]
> ADC Telecommunications, Inc> MSFAX
> PO Box 1> cell/pager
> Minneapolis, MN  55440-1101     
>@mobile.att.net
>
_______________________________________________________________
> 
> 
>
============================================================================
====
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
> 


__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.