Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Can not connect

Status
Not open for further replies.
rphips

rphips

IS-IT--Management
Sep 12, 2003
590
US
Hello everyone

I posted earlier about not connecting and I have ask tek_tips to remove that post cause it was useless and lacked info.
I have been working on this VPN connection now for 4 days and here is waht is going on.

I can connect up to the VPN sever on my PIX 506e firewall and I get prompted for user name and password. I have AIS set up on my 2000 server with Raidus and the VPN configured for Raidus. However when I type in the user name and password in the VPN client I get User cannot be authenticated.

I have Cisco VPN client 4.0.1 with PIX 6.3 IOS

The following is my config of the PIX

PIXWall# show startup-config
: Saved
: Written by enable_15 at 03:48:04.223 UTC Fri Oct 22 2004
PIX Version 6.3(1)
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password e3x3Tu7bL2xZ7.4V encrypted
passwd e3x3Tu7bL2xZ7.4V encrypted
hostname cognetxwall
domain-name cognetx.com
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
names
name 192.168.1.12 main
object-group network coghosts
network-object 192.168.1.3 255.255.255.255
network-object 192.168.1.4 255.255.255.255
network-object 192.168.1.6 255.255.255.255
network-object main 255.255.255.255
access-list NONAT permit ip 192.168.1.0 255.255.255.0 192.168.100.0 255.255.255.
0
access-list outside_authentication_RADIUS permit tcp interface outside host 146.
145.27.5
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside 148.146.27.2 255.255.255.248
ip address inside 192.168.1.2 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool VPN 192.168.1.225-192.168.1.254
pdm location 192.168.1.0 255.255.255.0 inside
pdm location 192.168.1.3 255.255.255.255 inside
pdm location 192.168.1.4 255.255.255.255 inside
pdm location 192.168.1.6 255.255.255.255 inside
pdm location 148.146.8.0 255.255.255.0 outside
pdm location 148.146.36.0 255.255.255.0 outside
pdm location 148.146.64.0 255.255.255.0 outside
pdm location 148.146.65.0 255.255.255.0 outside
pdm location 169.254.200.0 255.255.255.0 outside
pdm location 192.168.100.0 255.255.255.0 outside
pdm location main 255.255.255.255 inside
pdm location 192.168.1.224 255.255.255.224 outside
pdm group coghosts inside
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list NONAT
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 148.146.27.3 192.168.1.3 netmask 255.255.255.255 0 0
static (inside,outside) 148.146.27.6 192.168.1.6 netmask 255.255.255.255 0 0
static (inside,outside) 148.146.27.4 192.168.1.4 netmask 255.255.255.255 0 0
static (inside,outside) 148.146.27.5 main netmask 255.255.255.255 0 0
conduit permit icmp any any
conduit permit tcp host 148.146.27.3 eq smtp any
conduit permit tcp host 148.146.27.3 eq pop3 any
conduit permit tcp host 148.146.27.3 eq conduit permit tcp host 148.146.27.3 eq https any
conduit permit tcp host 148.146.27.5 eq smtp any
conduit permit tcp host 148.146.27.5 eq pop3 any
conduit permit tcp host 148.146.27.5 eq conduit permit tcp host 148.146.27.5 eq https any
conduit permit tcp host 148.146.27.6 eq https any
conduit permit tcp host 148.146.27.6 eq ftp any
conduit permit tcp host 148.146.27.6 eq 1433 any
conduit permit tcp host 148.146.27.6 eq 1434 any
conduit permit tcp host 148.146.27.4 eq ftp any
conduit permit tcp host 148.146.27.5 any
route outside 0.0.0.0 0.0.0.0 148.146.27.1 1
timeout xlate 0:05:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server RADIUS (inside) host 192.168.1.2 cogVPN123 timeout 5
aaa-server RADIUS (outside) host 148.146.27.2 cogVPN123 timeout 5
aaa-server LOCAL protocol local
aaa authentication match outside_authentication_RADIUS outside RADIUS
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
sysopt connection permit-l2tp
auth-prompt accept Welcome To Cognetx
auth-prompt reject You have been denied access
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set STRONG esp-3des esp-md5-hmac
crypto ipsec transform-set NORMAL esp-des esp-md5-hmac
crypto dynamic-map CNX 1 set transform-set NORMAL
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-DES-MD5
crypto dynamic-map inside_dyn_map 20 set transform-set ESP-DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map client configuration address initiate
crypto map outside_map client configuration address respond
crypto map outside_map client token authentication RADIUS
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic inside_dyn_map
crypto map inside_map client configuration address initiate
crypto map inside_map client configuration address respond
crypto map inside_map client token authentication RADIUS
crypto map inside_map interface inside
isakmp enable outside
isakmp enable inside
isakmp key ******** address 0.0.0.0 netmask 0.0.0.0
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 1
isakmp policy 10 lifetime 86400
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
isakmp policy 40 authentication pre-share
isakmp policy 40 encryption 3des
isakmp policy 40 hash md5
isakmp policy 40 group 2
isakmp policy 40 lifetime 86400
vpngroup cognet address-pool VPN
vpngroup cognet dns-server main 192.168.1.3
vpngroup cognet wins-server main
vpngroup cognet default-domain Cognetx.com
vpngroup cognet idle-time 1800
vpngroup cognet user-idle-timeout 120
vpngroup cognet password ********
telnet 192.168.1.0 255.255.255.0 inside
telnet timeout 5
ssh 169.254.200.0 255.255.255.0 outside
ssh 148.146.8.0 255.255.255.0 outside
ssh 148.146.36.0 255.255.255.0 outside
ssh 148.146.64.0 255.255.255.0 outside
ssh 148.146.65.0 255.255.255.0 outside
ssh timeout 30
console timeout 0
vpdn group L2TP-VPDN-GROUP accept dialin l2tp
vpdn group L2TP-VPDN-GROUP ppp authentication mschap
vpdn group L2TP-VPDN-GROUP client configuration address local VPN
vpdn group L2TP-VPDN-GROUP client configuration dns main 192.168.1.3
vpdn group L2TP-VPDN-GROUP client configuration wins main
vpdn group L2TP-VPDN-GROUP client authentication aaa RADIUS
vpdn group L2TP-VPDN-GROUP client accounting RADIUS
vpdn group L2TP-VPDN-GROUP l2tp tunnel hello 60

vpdn enable outside
vpdn enable inside
terminal width 80
Cryptochecksum:1dd03436f2a8cc64ee2647061d1a3e63
PIXwall#

Any help please I am under a deadline.



bob

"ZOINKS !!!!!"

Shaggy
 
Sort by date Sort by votes
Dont call Linksys, today I was on the phone with them 3 this.... each time they either disconnected or hung up with me. Left Me on hold till I went away...

When I purchased my router/vpn it all seemed simple...but in reality I also am not sure with how to finalize the installation. If you find more information, I would appreciate hearing your findings.

Thanks much.

Mitch

 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

F
  • Locked
  • Solved
some IP Phone not working over site-to-site OpenVPN, packets modified on other side of tunnel
Replies
1
Views
2K
FrankSider12
F
Randy_F
  • Locked
  • Question
Need to connect to a VPN on startup... how to run a script that will automatically reconnect
Replies
0
Views
401
Randy_F
Randy_F
Noway2
  • Locked
  • Question
Connect to Windows Domain after VPN
Replies
2
Views
181
PD1001
PD1001
sunil2suss
  • Locked
  • Question
Can't connect to Sonicwall VPN gateway from my office 1
Replies
3
Views
178
Noway2
Noway2
Voodoobean
  • Locked
  • Question
Unable to connect to my server via VPN
Replies
0
Views
96
Voodoobean
Voodoobean

Part and Inventory Search

Sponsor

Back
Top