M?ndagH?ndelsetyp: Information
H?ndelsens k?lla: IAS
H?ndelsekategori: Ingen
H?ndelse-ID: 1
Datum: 2009-05-25
Tid: 10:31:30
Anv?ndare: Saknas
Dator: ACTIVE-B1EEBCCD
Beskrivning:
Anv?ndaren marhaf gavs ?tkomst.
Fullkvalificerat anv?ndarnamn = tech.priv.com/Tech/XXXX XXXXXXX
NAS-IP-adress = 192.168.5.2
NAS-identifierare =
Eget namn f?r klienten = FW02
Klientens IP-adress = 192.168.5.2% CSID (Calling-Station-Identifier) = 0.0.0.0
NAS-porttyp =
NAS-port = 24
Proxy-principnamn = management
Autentiseringsprovider = Windows
Autentiseringsserver =
Principnamn = Management
Autentiseringstyp = PAP
EAP-typ =
Mer information finns i Hj?lp- och supportcenter p? sidan http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ….
That’s Swedish so if you don’t know the launguage then don’t try it.:P
What it says is that the User I login in at the ASA firewall succeds, it gives access to the user. Seems at not all is even i that message so got to change that once I get up from bed.
However at the Firewall the user gets denied, IAS is told to allow more or less everything, unecrypted, no need for authentication.
interface Ethernet0/0
nameif Inside
security-level 100
ip address 192.168.5.2 255.255.255.0
!
interface Ethernet0/1
nameif Outside
security-level 0
ip address 211.16.20.35 255.255.255.0
!
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
nameif Management
security-level 100
ip address 192.168.10.1 255.255.255.0
management-only
!
route Inside 192.168.1.0 255.255.255.0 192.168.1.2 1
!
router ospf 1
network 192.168.5.0 255.255.255.0 area 0
network 192.168.10.0 255.255.255.0 area 0
network 211.16.20.0 255.255.255.0 area 0
area 0 authentication message-digest
log-adj-changes
aaa-server Tech_Radius protocol radius
accounting-mode simultaneous
max-failed-attempts 5
aaa-server Tech_Radius host 192.168.1.1
key Password123
authentication-port 1812
accounting-port 1813
username Admin password P4ttSyrm33SV8TYp encrypted privilege 15
aaa authentication http console Tech_Radius LOCAL
aaa authentication enable console Tech_Radius
http server enable
http 192.168.10.0 255.255.255.0 Management
All the secret/passwords are the same. I have read about people setting up VPN tunnels against the Radius server but gets lost when it comes to configure them on the Win2k3 server. Any help at all is appriciated and more information will be posted as soon that I get the time to. Some are making an dhcp pool at the Asa firewall and just authenticate against the radius server. I got DNS, DHCP, AD and IAS on the same server so I’m confused by all the examples. They do not seem to fit my senario.
