PIX VPN Xauth with Microsoft IAS (Radius)

[s.vidanovic]

Hello,

I am trying to setup VPN user authentication with Microsoft IAS. What is happening is following: VPN client receives the auth prompt, PIX passes credentials to Microsoft IAS, in the event log of IAS I see that user is successfully authenticated, but PIX gives back response to the VPN client that authentication failed.

My question: Does anyone knows about this behavior, and the second question, is there any document (either from Microsoft or Cisco) which describes the above situation.

Thanks in advance,

Sascha

[sghosh]

Hi Sascha,

Here is doc which gives you detail configuration example of using IAS server and pix to terminate vpn clients.

http://www.cisco.com/warp/public/110/cvpn3k_pix_ias.html

Note in the picture at step 7 of "Configuring the Microsoft Windows 2000 Server with IAS "

"Client must always send the signature attribute" is unchcked.

Thanks

Sujit