Re: [FW-1] SecurID

[Don <don@FW1-NOSPAMBLACKSUN.ORG>]

> SecurID Authentication is not supported on the Nokia IP Applications
> appliance in NG FP1 release. The only workaround is to configure the
> SecurID (ACE) server as a RADIUS server and change the authentication
> scheme of the user to RADIUS with shared secret.
Now this is even more maddening.

I have configured my firewall on the ACE server. The ACE server is
configured for RADIUS. The firewall is configured for RADIUS. They both
have the same shared secret.

Any attempts to login to the firewall result in an entry in the ACE logs
stating: "Node Verification Failed." The RADIUS server works (we use it
for a dial in server) and the account I am testing works (As I can test
this using the ACE test agent).

This is a 4.1 ACE server running RADIUS on UDP 1645. The CheckPoint is
configured to use RADIUS (Both v1 and v2 were tested) with the RADIUS
service (UDP 1645).

I see the communications between the two systems in a tcpdump.

Can anyone suggest some troubleshooting tips?

Thanks,
-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================