Are you using RADIUS or SecurID? SecurID should give you a SecurID authentication error.
Assuming you're using SecurID, log into the ACE server, and run the monitor log. Make sure that the IP address that's being reported to the ACE server from the Nokia is that which is defined for the ACE agent. Many times I've seen a FW Gateway doesn't report the proper IP to the ACE server. There are two solutions, add a secondary IP into the ACE server for the Nokia OR there's a file that can be edited on the Nokia that forces the IP. Forgive me because I don't know the name of the file. Mark -----Original Message----- From: Mailing list for discussion of Firewall-1 on behalf of Zheng Xu Sent: Mon 3/1/2004 10:21 AM To: [EMAIL PROTECTED] Subject: [FW-1] Help for configuring SecureID ACE server Hi, We have four sites (A,B,C,D) with Nokia 350 and NG-AI R54 and two SecureID ACE servers. Each site is configured with SecureClient connection. The ACE server one is located behind site C, the ACE server two is behind site D. We have only one management server which is behind site A. When a user connects to site C or D, s/he can be authenticated through ACE servers. When a user who connects to site A or B, the authentication fails or "RADIUS server at xxx site is not responding". We have mesh site-site VPN and remote access defined. Both Accept VPN-1 & FireWall control connections and Accept Remote Access control connections are selected. Can you help me? Thanks in advance, Zheng ------------------------------------------------------------------------------------------------------------------- The information contained in this e-mail is for the exclusive and confidential use of the addressee. Any other distribution, use or reproduction of the information contained in this message, by the addressee or by any other recipient, is not authorized. If you have received this message in error, please notify the sender. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
