03-04-2008 09:12 AM - edited 03-10-2019 03:41 PM
I configured an ASA as VPN using Windows IAS authentication. When using test aaa authentication command, I receive ERROR: Authentication no respond: no error. I can ping the IAS server? The configuration can be found this page:http://www.howtocisco.com/cisco/samples/iasexample.htm.
Any suggestions?
03-05-2008 06:55 AM
Do you see any hits on IAS, event logs ? Make sure PAP in enabled on IAS.
Regards,
~JG
Do rate helpful posts
03-05-2008 08:22 AM
Hi,
Thank you for the reply. It didn't hit the IAS and no error in the Event Viewer. Then I found the problem was the IAS stops. After started it, my test received another error Invalid password. The Event shows ID 2 with authentication method is PAP. So I enabled the PAP (Unencrypted authentication) on the IAS. I can VPN in now. Is the the PAP (Unencrypted authentication)? Can I force the VPN use different authentication such as MS-CHAP v1 or v2?
03-05-2008 09:59 AM
Good to know that. Yes you can force vpn to use other methods. That settings needs to be done on vpn server and on IAS you need to enable that method.
Regards,
~JG
Do rate helpful posts
03-05-2008 10:20 AM
By default, MS-CHAP is enabled. How do you setup MS-CHAP on the ASA? Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide