cisco4ng, If you have this working, any chance you can email me offline how you set this up, so I can see where I am going wrong?
very much appreciated. -- Jason <aleyj @ spicers . net> > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] Behalf > Of cisco4ng > Sent: Wednesday, January 17, 2007 4:08 PM > To: [email protected] > Subject: Re: [FW-1] SecureClient Radius CHAP Authentication > > > Hugo, > > Are you sure about this? I get CP NGx to authenticate > SecureRemote users to my > Microsoft Radius (aka IAS) using MSCHAP and MSCHAPv2. I > have the box "PAP SPAP" > unchecked on the IAS server. Everything is working for me > with CHAP and CHAPv2 > > Am I missing something here? > > Hugo van der Kooij <[EMAIL PROTECTED]> wrote: > On Wed, 17 Jan 2007, Jason Aley wrote: > > > If I allow PAP authentication on the RADIUS (IAS) server I can > > authenticate and everything is fine and dandy, however, if > I restrict > > the connection to MSCHAP or MSCHAPv2, I get Access denied - wrong > > username or password. > > > > has anyone got any ideas? > > Don 't use it. CP does not support anything but PAP because > CHAP needs to > do a different handshake. > > Hugo. > > -- > [EMAIL PROTECTED] http://hvdkooij.xs4all.nl/ > This message is using 100% recycled electrons. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > > > --------------------------------- > Don't get soaked. Take a quick peak at the forecast > with theYahoo! Search weather shortcut. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ________________________________________________________________ This e-mail message is intended solely for the person to whom it is addressed and may contain confidential or privileged information. If you have received it in error, please notify [EMAIL PROTECTED] and destroy this e-mail and any attachments. In addition, you must not disclose, copy, distribute or take any action in reliance on this e-mail or any attachments. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of the company. E-mail may be susceptible to data corruption, interception, unauthorised amendment, viruses and unforeseen delays, and we do not accept liability for any such data corruption, interception, unauthorised amendment, viruses and delays or the consequences thereof. Accordingly, this e-mail and any attachments are opened at your own risk. Spicers Ltd. ________________________________________________________________ Registered in England, Registration No. 425809 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
