Hi Yannick,
Did you actually set the users authentication tab to
RADIUS, and tell it which RADIUS server to use?
What kind of RADIUS server,and what is the RADIUS
server talking to? Did you tell the RADIUS server the
IP addresses of the firewall? Incluing the ip address
closest to the RADIUS server. Do you get any messages
in the RADIUS logs?
These are some of the things I wind up having trouble
with.
HTH,
Pete Goodridge
--- Yannick Lo Guidice <YLG AT FR.IBM DOT COM> wrote:
> Hi all,
> I'm trying to set up Radius authentication for
> SecuRemote users. The
> SecuRemote connection is already in production and
> uses VPN-1 password.
> My FW is a Nokia running CP NG AI R55 and my
> SmartCenter is a Windows
> 2000 running CP NG AI R55.
> I have defined the Radius server, the SecuRemote
> users group that uses
> Radius authentication, created the rules for
> authorizing the Radius
> traffic between the FW and the Radius server and
> made connection tests,
> but the FW does not even make a request to the
> Radius server. In the
> Smartview Tracker, the error message I get is
> "authentication failure".
> Is there anyone who has already set up a
> configuration like this and
> that can give me some help on this ?
> Regards,
> --
> Yannick LO GUIDICE - ylg AT fr.ibm DOT com
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|