<div>
What kind of authentication are you using?<br />
Radius, kerberos, LDAP, NTdomain?
</div>


What kind of authentication are you using?
Radius, kerberos, LDAP, NTdomain?

<div>
Im using kerberos authentication<br />
thanks
</div>


<div>
Hi Geergon<br />
<br />
I tried to install the hotfix but my service pack already have it so that did not work. Then I tried first changing on the user properties, under the account tab, where says Do not required Kerberos Preauthentication, I cheked that box ans then save it.<br />
<br />
I went back to the concentrator and I test the user account and was successful. <br />
I did not chenged the regustry key.<br />
<br />
Thanks for your help
</div>


Hi Geergon

I tried to install the hotfix but my service pack already have it so that did not work. Then I tried first changing on the user properties, under the account tab, where says Do not required Kerberos Preauthentication, I cheked that box ans then save it.

I went back to the concentrator and I test the user account and was successful.
I did not chenged the regustry key.

Thanks for your help

<div>
The info he gave me was right.
</div>


<div>
<div class="content wysiwyg-content">
Hi guys<br />
<br />
I upgrade my primary domain controller from windows 2000 server to windows 2003 enterprise server. Now when users try to connect to the VPN from their homes, the request is rejected. I went into the concentrator and when I do a test to the nre DC(new dc has the same ip address that the old had) I get the following error:<br />
<br />
&nbsp;An error has occurred while attempting to perform the operation. <br />
<br />
Authentication Rejected: Unspecified<br />
<br />
Do I need to check any particular settings on the new DC? I can ping the DC from the concentrator.<br />
<br />
Please can you give me some ideas<br />
Thanks<br />

</div>
</div>


Hi guys

I upgrade my primary domain controller from windows 2000 server to windows 2003 enterprise server. Now when users try to connect to the VPN from their homes, the request is rejected. I went into the concentrator and when I do a test to the nre DC(new dc has the same ip address that the old had) I get the following error:

 An error has occurred while attempting to perform the operation. 

Authentication Rejected: Unspecified

Do I need to check any particular settings on the new DC? I can ping the DC from the concentrator.

Please can you give me some ideas
Thanks


Cisco VPN Concentrator 3000 reject client authetication

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.