Windows Server 2008
Windows Server 2008

Radius

Good afternoon everyone

am trying to set up radius server for my 5510 asa ver 8.2 each time i ran a test i get Authentication Server not responding: AAA decode failure.. server secret mismatch::::i have changed the passswords on the asa and server but i cant get pass this ..PLZ HELPPPPP

aaa-server radius-group protocol radius
aaa-server radius-group (inside) host 10.0.1.252
key *****
radius-common-pw *****

Shawn WilliamsAsked: 2015-08-11

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 83

arnoldCommented: 2015-08-12

Double check that the client (ASA) secret defined is the same you are sending.

If you could post what you have setup on the server, masquerading ..

case sensitive.

Debug the radius request from the ASA to see what it is sending (Framed-.....)

Shawn WilliamsAuthor Commented: 2015-08-12

i can't post my server setting but i changed the secret on both side and that seem to work for that part now im getting :::::::::::::::::::: Authorization Rejected: AAA failure ,

AOC-BuckheadASA5510# test aaa-server authorization radius-group username Shawn
Server IP Address or name: 10.0.1.252
INFO: Attempting Authorization test to IP address <10.0.1.252> (timeout: 12 seconds)
ERROR: Authorization Rejected: AAA failure

LVL 83

arnoldCommented: 2015-08-12

The criteria that you defined did not match to authorize the user. Check the event log on the windows side.
you need to include all the parameters in the authentication/authorization request.

the type of connection that is being made.
check whether the user will be able to authenticate via radius.

usually, you have one authenticate the user first, then whether the user who authenticated is authorized to access the resources being requested.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial