VPN server talking to ISA server in order to authenticate on the internal LAN

  • Thread starter Thread starter Sarah
  • Start date Start date
S

Sarah

I set up a test environment whereby a VPN client dialled a VPN server that
then authenticated to an IAS server. This worked perfectly.
I have put an ISA server in between the VPN server and the IAS server.
The client can no longer authenticate. I get error 930.

The VPN server reports that the IAS authentication server did not respond in
a timely fashion.
The IAS server shows no sign of having received the request.
It looks like the ISA server has not received anything either.

Can anyone point me in the direction of what they think could be the
problem? All suggestions (basic or otherwise) more than welcome!!!

Cheers
Sarah
 
these are the ports radius uses

Radius accounting (Routing and Remote Access)
TCP 1646 or TCP 1813


Radius authentication (Routing and Remote Access)
TCP 1645 or TCP 1812



Check the ISA firewall if these ports are opened?
 
I have opened up UDP (not TCP) 1813 and 1812.
I believe this is correct.

Sarah

Pawan Agarwal (MSFT) said:
these are the ports radius uses

Radius accounting (Routing and Remote Access)
TCP 1646 or TCP 1813


Radius authentication (Routing and Remote Access)
TCP 1645 or TCP 1812



Check the ISA firewall if these ports are opened?

--
-Pawan [MSFT]

-------------------------------------------------------------------------
"This posting is provided "AS IS" with no warranties, and confers no
rights."
------------------------------------------------------------------------
Sarah said:
I set up a test environment whereby a VPN client dialled a VPN server that
then authenticated to an IAS server. This worked perfectly.
I have put an ISA server in between the VPN server and the IAS server.
The client can no longer authenticate. I get error 930.

The VPN server reports that the IAS authentication server did not
Click to expand...
respond
in
a timely fashion.
The IAS server shows no sign of having received the request.
It looks like the ISA server has not received anything either.

Can anyone point me in the direction of what they think could be the
problem? All suggestions (basic or otherwise) more than welcome!!!

Cheers
Sarah
Click to expand...
Click to expand...
 
Back
Top