Solved

Cisco ASA 5505 Remote User VPN Radius Authentication

Posted on 2011-09-14
4
2,094 Views
Last Modified: 2012-05-12
Hello! I'm attempting to have my remote users login to our VPN using RADIUS .I've followed http://fixingit.wordpress.com/2009/09/08/using-windows-server-2008-as-a-radius-server-for-a-cisco-asa/ as well as a few other sites, and am not having the same results as they have. When I go to test the connection b/w the ASA and Server 2008,  The message I get is "Authentication Server not responding; No error." I've triple checked my address (can ping b/w both), radius port #s, secret key, etc. Any other ideas?
0
Comment
Question by:prlit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36538689
On the ASA command line (maybe in ASDM as well someplace) there's a command to test AAA.  Been a while since I've done it but it's something like "test aaa authentication <server> user <name> password <password>".  That might help to see if there's communication between the ASA and the AAA server.  If the test fails, and you know the credentials are correct, then there is something that's getting in the way of the communication.  You can also do "debug aaa authentication" on the ASA to see what is happening from its perspective.  Those are the things I would start with.

Incidentally, can any other devices authenticate using AAA on that server, or is it only the ASA that's trying?
0
 
LVL 1

Author Comment

by:prlit
ID: 36538702
Thats the command I was using :( The ASA is the only thing that is trying to authenticate with AAA.
0
 
LVL 1

Accepted Solution

by:
prlit earned 0 total points
ID: 36538998
Figured it out! The server has multiple nics,and the AAA requests werent being looked for properly. Under NPS and the server settings, if you change the ports from say1645 to "10.10.10.10:1645, 1812"it will properly forward the request.. All that work for one line, haha.
0
 
LVL 1

Author Closing Comment

by:prlit
ID: 36558804
Resolved situation by myself.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question