[strongSwan] Radius-AD-IAS

[Andreas Steffen]

Hi,

it seems that your RADIUS server @ 192.168.1.1'
is not responding. Please check the log on your
RADIUS server.

Regards

Andreas

On 23.12.2013 15:26, Huang, Zhenxing wrote:
> Hello . I am want to use windows 2003 ad-user +ias  to authenticationthe
> vpn dial-in
>
> We are get the LOG : what is the problem ?
>
> Dec 23 22:15:52 gateway charon: 09[CFG] looking for peer configs
> matching server-ip [%any]... client-ip[172.30.1.251]
>
> Dec 23 22:15:52 gateway charon: 09[CFG] selected peer config
> 'eap-mschapv2-radius'
>
> Dec 23 22:15:52 gateway charon: 09[IKE] initiating EAP_IDENTITY method
> (id 0x00)
>
> Dec 23 22:15:52 gateway charon: 09[IKE] peer supports MOBIKE
>
> Dec 23 22:15:52 gateway charon: 09[IKE] authentication of 'ca' (myself)
> with RSA signature successful
>
> Dec 23 22:15:52 gateway charon: 09[IKE] sending end entity cert
> "************"
>
> Dec 23 22:15:52 gateway charon: 09[ENC] generating IKE_AUTH response 1 [
> IDr CERT AUTH EAP/REQ/ID ]
>
> Dec 23 22:15:52 gateway charon: 09[NET] sending packet: from server-ip
> [4500] to client-ip [4500] (1220 bytes)
>
> Dec 23 22:15:52 gateway charon: 08[NET] received packet: from client-ip
> [4500] to server-ip [4500] (84 bytes)
>
> Dec 23 22:15:52 gateway charon: 08[ENC] parsed IKE_AUTH request 2 [
> EAP/RES/ID ]
>
> Dec 23 22:15:52 gateway charon: 08[IKE] received EAP identity
> 'huang.zhenxing'
>
> Dec 23 22:15:52 gateway charon: 08[CFG] sending RADIUS Access-Request to
> server '192.168.1.1'
>
> Dec 23 22:15:53 gateway charon: 10[MGR] ignoring request with ID 2,
> already processing
>
> Dec 23 22:15:54 gateway charon: 12[MGR] ignoring request with ID 2,
> already processing
>
> Dec 23 22:15:54 gateway charon: 08[CFG] retransmitting RADIUS message
>
> Dec 23 22:15:57 gateway charon: 08[CFG] retransmitting RADIUS message
>
> Dec 23 22:15:57 gateway charon: 13[MGR] ignoring request with ID 2,
> already processing
>
> Dec 23 22:16:01 gateway charon: 08[CFG] retransmitting RADIUS message
>
> Dec 23 22:16:04 gateway charon: 11[MGR] ignoring request with ID 2,
> already processing
>
> Dec 23 22:16:06 gateway charon: 08[CFG] retransmitting RADIUS message
>
> Dec 23 22:16:06 gateway charon: 08[CFG] RADIUS server is not responding
>
> Dec 23 22:16:06 gateway charon: 08[IKE] initiating EAP_RADIUS method failed
>
> Dec 23 22:16:06 gateway charon: 08[ENC] generating IKE_AUTH response 2 [
> EAP/FAIL ]
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
>

-- 
======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4255 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20131223/2db22431/attachment.bin>