Cisco ASA5510 solution remote Access on IAS using Windows 2003 with IPSEC

Hi All,

I need your  expert assistance to get fix my problem :

LAN network [ Microsoft IAS-RADIUS configured and IPSEC policy in AD
server]---PIX ASA5510 --Internet ---- Remote VPN  client ( Connection
manager Automatic for IPSEC)

Can anybody assists me how to configure Remote Access  using IPSEC in IAS or
does IAS supports IPSEC protocol , if it is not what is the MS product
integrated in Windows 2003 OS  which supports IPSEC- Remote access AD
authentication not local PIX authentication.
May I know the steps and procedures and if possible any website with this
configuration and already working and tested.

Hoping your reply at the earliest and Please respond.

Thanks.
chaulqAsked:
Who is Participating?
 
rsivanandanConnect With a Mentor Commented:
1. Cisco VPN Client for clients
2. Configure VPN on ASA box
3. Configure the authentication through Radius, where Radius server being IAS.
4. IAS in turn will authenticate users using Active Directory.

If this is what you want, it is very simple; Just follow the Cisco link below for the full config including IAS.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_example09186a00806de37e.shtml

Cheers,
Rajesh
0
 
chaulqAuthor Commented:
I config step by step, but don't  run

event log view

User testvpn was denied access.
Fully-Qualified-User-Name = domain.com\testvpn
NAS-IP-Address = x.x.x.x
NAS-Identifier = <not present>
Called-Station-Identifier = x.x.x.x
Calling-Station-Identifier = x.x.x.x
Client-Friendly-Name = asa
Client-IP-Address = x.x.x.x
NAS-Port-Type = Virtual
NAS-Port = 1
Proxy-Policy-Name = vpn
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = <undetermined>
Authentication-Type = PAP
EAP-Type = <undetermined>
Reason-Code = 16
Reason = Authentication was not successful because an unknown user name or incorrect password was used

Help me, thanks

0
 
rsivanandanCommented:
Go to Active Directory, select the user 'testvpn' and open his properties. Check to see if he is allowed for 'dial-in' access. I am guessing it is not enabled, so enable it and then try.

Cheers,
Rajesh
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
rsivanandanCommented:
?? Was that the problem?

Cheers,
Rajesh
0
 
rsivanandanCommented:
May I know why grade C ?

Cheers,
Rajesh
0
 
chaulqAuthor Commented:

I have check enable "dial-in" for user testvpn, but don't run

cheers,
0
 
rsivanandanCommented:
Then why did you accept the answer ? The link I gave you is exclusively for Cisco VPN access to PIX with ActiveDirectory Radius Authentication using IAS, including IAS screenshot configurations. If you still have a problem, you should've followed up!

Cheers,
Rajesh
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.