ACS 2.6 with NT domain trust relationship

[bma]

Hi

We are using Cisco concnetrator 3.15 with ACS 2.6 windows/2000 to check

vpn users login. It's working fine in the NT domain which ACS is in this domain, but for trusted domain, sometimes get vpn user login fail, then in the concentrator to test ACS RADIUS server wtih trusted domain account, get

no response from server error. We have to change ipsec for vpngroup to nt domain, then it's fine. please help.

Thanks

ben

[pradeepde]

Please verify if the VPN users who are failing authentication tried to change their passwords sometime in the past. If that is indeed the case, it sound like the problem documented as bug CSCdz45040, and though that was for v3.0(3.3), I guess you could try using MS_CHAPv2. Hope that helps.