Is present:
NAS on Cisco AS2511-RJ (IOS v 12.2 (19) file c2500-c-l.122-19.bin) (16 port with modems US Robotics Courier)
and
RAS on Windows 2000 server (8 port DigiNeo card with modems US Robotics Courier).
Users may come both through NAS and through RAS. The base for authentitication accordingly is desirable for making users uniform and controlled of one point. For this purpose on Windows 2000 it is established IAS (Radius server in execution Microsoft). Policies(politics) of the removed access for NAS and RAS are similar:
- IP the address of client IAS,
- Windows group, group of users for which the removed access is resolved(allowed).
For the same user at call through RAS and NAS a situation different.
For RAS - the user is identified IAS Win2k and his access to a network is authorized, for NAS - the user is not identified IAS Win2k and his access to a network is forbidden (as the reason underlined in event system log the following: it was not possible to execute check of authenticity because of a unknown name of the user or the wrong password).
Why at access through NAS the policy(politics) on Windows is not identified (the Name of a policy(politics) = <undetermined>?
Up to Cisco in quality NAS stood Decserver 90M (8 port) and such problems with it(him) were not.
There is a question who is guilty. Also what to do(make)?
Last hope for this forum., as in many anybody of nothing has prompted others to me for the decision of the specified problem. It is ready to give the additional data.
