Kevin,
I am using the Bay Networks Extranet Connectivity Switch and the Shiva
device for dial in and out capabilities. I can dial in, however, I cannot
dial out. Using the configuration for the lanrover using Radius instead of
the internal user list I cannot dial out. It states the Radius:
Authentication for (harold.gravatt) on line 1 succeeds! and shows
(harold.gravatt) logged in and kicks right back out and states
(harold.gravatt) logged out. I can log in as the secret user id and
password and stay connected but not as a NT domain user.
I used the information in the article and have the correct setting for
framed routing. Any light that you can shed on this matter would be helpful.
Regards,
Harold Gravatt
Network Administrator
Burke E. Porter Machinery
Grand Rapids, MI
>sorry typo on my part :) ...i'll fix
>I remember with the shiva's you need to set this to: outgoing
>can you post a netmon trace of the problem..
>thanks Kevin
>>Thank-you for the lead Kevin, would have never found it since the article
>>spells LanRover as LanDRover.
>>However, I was already using Framed Routing = NONE, which was the main
>point
>>of the article, and didn't get anything else out of it. Do you have any
>>other suggestions?
>>Thanks
>>>see the following KB article .. let me know if it resolves the problem
>>>http://support.microsoft.com/support/kb/articles/q195/2/87.asp?FR=0
>>>Kevin (MS)
>>>>I am attempting to use the MS RADIUS from the IIS option pack with Shiva
>>>>LanRover/E v5.0.
>>>>I keep getting Failed Authentication 8199 errors in the event log.
>>>>The exaxt text is...
>>>>Failed authentication: Source = 10.22.29.168:2072
>>>> Code = Access-Reject
>>>> Identifier = 9
>>>>I'm using the following Profile attributes as indicated from the Shiva
>>>>knowledgebase:
>>>>Service Type Framed
>>>>Framed Protocol PPP
>>>>Framed IP Address 0.0.0.0
>>>>Framed IP Netmask 255.255.0.0
>>>>Framed Routing None
>>>>Framed Compression VJ TCP/IP
>>>>Framed MTU 1500
>>>>This is happening on Dial-OUT right now, but I can't imaging it working
>>for
>>>>dial in from home tonight if I can't dial out first. There is also not
>log
>>>>created in the specified IAS directory.
>>>>I have also tried the settings in MS Q183337 for some USR hardware to no
>>>>avail.
>>>>Anyone have any luck with this combination?
>>>>Thanks
by