2811, Pix 515e, & 3005

Help!

Need some advice here. Have VPN up and running with authentication for
group & users internal to VPN. I can establish sessions for multiple
clients. The vpn inside sits behind Pix. Outside is between 2811 &
515e. I am trying to setup IAS on 2003 box that is sitting behind Pix.

I want the concentrator to authenticate group against internal db on
3005 and then pass user authentication to IAS. The IAS box is
configured correctly as I can authenticate against it from other
hardware. I have reviewed the docs on the cisco site and have the
Raduiys with expiry configured correctly based on this information.

Is there anything special since a Pix is part of the equation? Has
anyone been able to get a configu such as this to work?

Thanks in advance.

.

Relevant Pages

  • Re: How do I deal with remote non domain PCs
    ... member file server, what would you use to authenticate? ... environment/Certificates or is IAS enough? ... When access clients attempt to connect through VPN PPTP connections and the ... network resources -- and IAS does not perform authentication when VPN users ...
    (microsoft.public.internet.radius)
  • Re: Radius Server
    ... I use Cryptocard for 2-factor VPN authentication. ... also don't see what IAS with Windows Authentication adds to ordinary RRAS ...
    (microsoft.public.windows.server.sbs)
  • Re: [fw-wiz] Secure access to LAN resources (WAS: terminal services)
    ... > encrypted tunnel. ... VPN devices are designed to do strong authentication. ... It's always a trade-off between risk and protection. ...
    (Firewall-Wizards)
  • Re: Cisco PIX with SSH enabled on external port for maintenance
    ... I took the original poster as wanting to enable SSH to the PIX itself ... - PIX SSH does not support public key authentication. ... VPN fixes this by ...
    (Security-Basics)
  • RE: VPN
    ... possible to verify the identity of the server". ... Authentication, the Internet Authentication Service need to be ... On the VPN server, click Start, click Run, type rrasmgmt.msc, and then ... Windows Authentication, under Accounting Provider, click to select Windows ...
    (microsoft.public.windows.server.sbs)