RE: [FW1] Ike with radius authentication

[Mark Squire]

Title: RE: [FW1] Ike with radius authentication

Hi, I am working on this right now.� I think a hybrid IKE mode is necessary from what I have read, and I am looking into the use of Certificates too.� I will post a rough-draft of a how-to here when/if I get it working.� Otherwise I will just use FWZ.   C:\Mark   -----Original Message----- From: Scott Hunter [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 31, 2001 4:31 AM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [FW1] Ike with radius authentication     Thanks for the response, but with that configuration, SecuRemote reports that "IKE is not properly defined for user" and FW1 reports that "User cannot use IKE".  RADIUS works fine for FWZ.     -----Original Message----- From: Ilya Akinfiev [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 31, 2001 12:56 AM To: 'Scott Hunter' Subject: RE: [FW1] Ike with radius authentication you should turn off both password and cert auth on ike tab for the generic* usre - the auth tab should list radius - that's it...   -----  Ilya Akinfiev ; Security Consultant ------ --- SiegeWorks Enterprise Security Solutions ---- ---- siegeworks.com ; (925) 224-7720 x 201 ------ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Hunter Sent: Tuesday, January 30, 2001 1:11 PM To: 'key chavez'; [EMAIL PROTECTED] Subject: RE: [FW1] Ike with radius authentication I have the same issue.  When using IKE and shared secrets, the User Name is no longer meaningful.  I can put anything in the User Name field in SecuRemote client and the shared secret from the IKE settings for the "generic*" account and it authenticates successfully.  That appears to override the RADIUS authentication.  Bummer.   -----Original Message----- From: key chavez [mailto:[EMAIL PROTECTED]] Sent: Sunday, January 28, 2001 6:30 PM To: [EMAIL PROTECTED] Subject: [FW1] Ike with radius authentication   How can I make a IKE-VPN using radius authentication. Does anybody know if it's possible? Where can I find information about this? Best regards, Key Chaves __________________________________________________ Do You Yahoo!? Yahoo! Auctions - Buy the things you want at great prices. http://auctions.yahoo.com/   ================================================================================      To unsubscribe from this mailing list, please see the instructions at                http://www.checkpoint.com/services/mailing.html ================================================================================