VPN error

rachelau_2005 · ‎06-15-2009

I have set up a ipsec/ike vpn on my cisco pix ( 515E), ASDM version is 5.2(3), PIX version is 7.2(1) and enable IPSec over NAT-T

When the VPN connection authenticate the user via TACAC+, it works great...

however, now I try to set it up so that it will authenticate with the LDAP Authentication with Domain ( microsoft), and gives this error code....

"Secure VPN Connection terminated by Perr. Reason 433: (Reason Not Specified

by Peer)"

any idea?

Thanks

Rachel

allen.malanda_2 · ‎06-16-2009

Hello,

You have to make sure that authenication is working from the pix to the Microsoft LDAP server. You can test your LDAP authentication on the PIX by using the command below.

test aaa-server authentication "AAA_GROUP_NAME"

Server IP Address or name: LDAP_SERVER_IP

Username: username

Password: *********

INFO: Attempting Authentication test to IP address <10.1.2.2> (timeout: 12 seconds)

INFO: Authentication Successful