[paypa]

Originally Posted by paypa

Are you using Native SecurID for the Client Authentication? Yes, I'm using Native SecurID with ACE Agent type being configured as a UNIX.

If you want to get the Nokia box to use RADIUS auth, and you're using your ACE server for it, you'll need to enable RADIUS on the ACE server if you haven't already done so.

I have both Radius and TACACS daemons running and have tried 1 or the other. From what I've been told, I can only setup the Agent Type in ACE to accept 1 or the other UNIX (Client Authentication) or Communication for TACACS or Radius.

Are you seeing traffic generated from the firewall towards your RADIUS server? Since I have suffient configured, I am seeing NEW-RADIUS traffic generated but then HTTP picks up since it is sufficient.

Are you seeing responses? What do your logs on the RADIUS server say? ACE is not seeing the request from the firewall.

Which IPSO version are you using?
Reply With Quote

I'm using 3.7 IPSO