[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: RE: [FW1] Re: RE: Radius authentication
It is a head ache, i set authentication as PAP also, tried giving the external interface as radius client also.i tried with a sniffer, i can seee the radius server giving out something to fw-1.i dont know what is happening ? Any way thanks to all for guiding me Mohamed. On Thu, 27 Sep 2001 Lars Troen wrote : > > > Is authentication method on the radius server set to > allow PAP > authentication? Is the radius server log telling you > anything? Is the shared > secret the same? > Does the radius server show up in the arp table of the > firewall? Are you > able to ping between the hosts? > > Lars > > -----Original Message----- > > From: [email protected] > > [mailto:[email protected] > ]On Behalf Of > > mohamed maraikayar > > Sent: Wednesday, September 26, 2001 14:58 > > To: Brockhoven,Werner > > Cc: [email protected] > > Subject: [FW1] Re: RE: Radius authentication > > > > > > > > > > I havent added any rules till now.now i added 2 rules, > from > > firewallgateway to raduis server any is allowed and > vice > > versa.Still i recieve the same error.i configured a > rule as " > > allusers@any ftp-serv ftp userauth gateway " > > and in the user properties, i enabled radius > authentication for a > > user,say mohd.when i ftp to ftp-serv,i get a prompt > bcoz of of > > user authentication rule.i entered the username mohd, > that is to > > be authenticated by radius server.so fw-1 gave a > prompt, "radius > > password:" ,i typed the password.then it took some 10 > seconds > > time and displayed,"radius servers not responding".i > disconnected > > the cable from fw-1 to radius server and tried again, > i got the > > same error.so i can now conclude that there is some > thing missing > > in the configuration of fw-1 or fw-1 related.any > clues ? > > thanks > > mohamed. > > > > On Wed, 26 Sep 2001 Brockhoven, Werner wrote : > > > Hi, > > > > > > Do you have a r n between > the > > > radius and the FW-1 ? > > > What do you get in the logging ? > > > > > > I'm sorry but I should ask you to send mails to the > > > checkpoint mailing list > > > and not directly to me personally. > > > > > > Regards, > > > > > > Werner > > > > > > > > > -----Original Message----- > > > From: mohamed maraikayar > [mailto:[email protected]] > > > Sent: Wednesday, September 26, 2001 12:41 PM > > > To: Brockhoven, Werner > > > Subject: Radius authentication > > > > > > > > > > > > Sorry, i am sending you a third mail.Now i have > made a > > > win 2000 advanced > > > server as radius server.i have done the necesary > > > configurations ,added the > > > client as firewall's interface,defined radius server > > > group etc.The win NT > > > (SP4), i have installed checkpoint 4.1 (SP2).i have > > > defined the radius > > > server,shared key etc in check point also.but the > error > > > i get is,"Radius > > > server not responding" , i searched mailing list > also, > > > but didnt get the > > > answer.what may be the problem ? > > > thanks, > > > mohamed. > > > > > > > > > > > > > > > > ======================================================- > ============ > > ============== > > To unsubscribe from this mailing list, please > see the instructions at > > http://www.checkpoint.com/services/mail- > ing.html > > ======================================================- > ============ > > ============== > > > > > > ========================================================- > ======================== > To unsubscribe from this mailing list, please see > the instructions at > http://www.checkpoint.com/services/mailin- > g.html > ========================================================- > ======================== > ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|