topic Re: SSL VPN is working fine with Local Authentication, but not with Radius Server,. in General Topics

SSL VPN is working fine with Local Authentication, but not with Radius Server,.

Gururaj — Mon, 21 May 2012 12:11:03 GMT

Hi Team,.

We have installed PA 2050 box at our client place in which SSL VPN is configured for remote access. Working fine with Local Authentication but not with Radius Authentication, in PaloAlto system logs, it is showing authentication failed. But we are not able to see any logs in Radius Server 2003. Onceagain I checked shared secret, IP address and Port, it is same in both Radius server and PaloAlto Device. As i don't have much knowledge on radius server it is difficult to identify the problem. Is there any perticuler document for integrating Radius server with PaloAlto Firewall.

Radius server is in same subnet, domain and also reachable from PaloAlto management port. Also created IAS on Server, Is there any extra configuration is required to solve this issue?plese do the needful,.

Thank you

Gururaj.

Re: SSL VPN is working fine with Local Authentication, but not with Radius Server,.

zarina — Mon, 21 May 2012 16:58:36 GMT

Have the following command running:

tail follow yes mp-log authd.log

and authenticate the user against AD. These logs will indicate the reason for failure. Please paste the output here.

Re: SSL VPN is working fine with Local Authentication, but not with Radius Server,.

npare — Mon, 21 May 2012 20:18:42 GMT

Did you take a look at this document : https://live.paloaltonetworks.com/docs/DOC-2909 ?

Re: SSL VPN is working fine with Local Authentication, but not with Radius Server,.

Gururaj — Fri, 01 Jun 2012 04:25:21 GMT

Hi npare,..

Thank you for your reply, It helped me to fix the problem. The problem was with Radius server.