RE: [FW1] Ike with radius authentication

[Scott Hunter]

Title: RE: [FW1] Ike with radius authentication

 

Thanks for the response, but with that configuration, SecuRemote reports that "IKE is not properly defined for user" and FW1 reports that "User cannot use IKE".  RADIUS works fine for FWZ.

 

 

-----Original Message-----
From: Ilya Akinfiev [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 31, 2001 12:56 AM
To: 'Scott Hunter'
Subject: RE: [FW1] Ike with radius authentication

you should turn off both password and cert auth on ike tab for the generic* usre - the auth tab should list radius - that's it...

 

-----  Ilya Akinfiev ; Security Consultant ------
--- SiegeWorks Enterprise Security Solutions ----
---- siegeworks.com ; (925) 224-7720 x 201 ------

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Hunter
Sent: Tuesday, January 30, 2001 1:11 PM
To: 'key chavez'; [EMAIL PROTECTED]
Subject: RE: [FW1] Ike with radius authentication

I have the same issue.  When using IKE and shared secrets, the User Name is no longer meaningful.  I can put anything in the User Name field in SecuRemote client and the shared secret from the IKE settings for the "generic*" account and it authenticates successfully.  That appears to override the RADIUS authentication.  Bummer.

-----Original Message-----
From: key chavez [mailto:[EMAIL PROTECTED]]
Sent: Sunday, January 28, 2001 6:30 PM
To: [EMAIL PROTECTED]
Subject: [FW1] Ike with radius authentication

How can I make a IKE-VPN using radius authentication.

Does anybody know if it's possible? Where can I find
information about this?

Best regards,

Key Chaves

__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices.
http://auctions.yahoo.com/

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================