contivity 1010 and Win2K AD authentication

[peterve]

Hi,

how can I authenticate my remote users using Windows 2000 Active Directory Ldap ?
Does anyone have a step-by-step guide for this ?
(Someone told me I need to set up a IAS server and use that as Ldap proxy... any insights or help would be greatly appreciated)


--------------------------------------------------------------------

http://kickme.to/dpsecurity

--------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------

 

[Netvigators]

Here is the step-by-step guide I found on the Nortel site....

http://www142.nortelnetworks.com/bvdoc/contivity/cg/CG030507.pdf

I was trying to setup the Win2k IAS server, and all remote VPN clients were sucessfully authenticated from IAS ONLY when they are using PPTP windows client to connect. I followed most of the help instruction and still couldn't make the contivity box and the IAS to authenticate any IPSec nortel vpn clients for some reasons.

The next step I will skip the IAS authentication, and follow the above documentation to use LDAP proxy authentication instead.

 

[Netvigators]

I just fixed the issue I had earlier with IAS. After I add the authentication method for PAP on IAS, the Nortel IPSec clients are now able to connect and get authenticated by IAS via the Active Directory.

 

[peterve]

is that based on external ldap or Radius ?


--------------------------------------------------------------------

http://kickme.to/dpsecurity

--------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------

 

[xmsre]

I managed to getthe IAS server up, and RADIUS authentication against AD going. To do it, I:

1. Installed IAS on the AD domain controller
2. In the IAS MMC snap-in, created a RADIUS client for the nortel device. I set the secret here on the windows side.
3. Created a remote access policy in the IAS snap-in which checks for membership in the group "remote vpn users".
4. Under connection request policies, created a new connection request policy with a custom policy condition of NAS-IP equals the IP of my nortel device.