Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

users cannot authenticate with vpn client3.5

we have w2k/nt network and using pix520 as vpn gateway. users have no problem connecting to pix and pinging hosts by name. but cannot authenticate on member servers except domain controller. any ideas?

4 REPLIES
avi
New Member

Re: users cannot authenticate with vpn client3.5

For the user name try typing DOMAINNAME\USERNAME

New Member

Re: users cannot authenticate with vpn client3.5

We have tried that and it doesn't work. VPN users never receive prompt for network authentication, I think this is the primary reason why the users cannot get access to the network resources.

New Member

Re: users cannot authenticate with vpn client3.5

You may want to check the WINS the client are using. Also make sure that Client for Microsoft Networks are enabled on the NIC/PPP adapter which ever you are using for the connection.

New Member

Re: users cannot authenticate with vpn client3.5

Hi rlew;

I am not sure if you have IAS on w2k running as your AAA server, but I am going to assume that you do.

there are 2 authentications that take place in establishing a VPN between the client and the PIX, the first phase is the group authentication which takes place on the pix, and the second phase is when the client gets prompted with username/password window which the AAA server use to authenticate.

If you are successful in the group authentication and you are not prompted with the client username/password window it is a setting on your PIX. Make sure you have the following command enabled on the PIX

"crypto map map-name client authentication tag-name"

If the first phase is not successful you need to check your group name and password settings on the PIX and your VPN client software.

97
Views
0
Helpful
4
Replies
CreatePlease login to create content