New answers tagged

0

In NPS, make sure PAP is enabled on the Connection Request Policy in addition to the Network Policy. I had a similar problem authenticating Cisco Prime Infrastructure using PAP, so maybe my solution will be applicable to you as well.


0

Be aware that there are side-effects of intercepting connections with http, and in fact in our tech support for our product (WinGate) although we support intercepting connections, we recommend against doing it. If you're using authentication at the proxy, the client doesn't know it's talking to a proxy. If a proxy wants to authenticate an intercepted ...


0

I ended up answering my own question - this is possible. I found out that Duo offers a free trial, so I went ahead and set up an account to try to get it to work with my setup. In the end, I was able to have both Active Directory LDAP and Duo Security LDAP set up at the same time. The relevant part of the code is here: tunnel-group VPN_RA type remote-access ...


2

Yes, you can change the peer IP address without create new Site-To-Site VPN In general you have to change two parameters. peer IP address tunnel group name According your link they changed only first setting. If you check your log file you have to find wrong tunnel group name or something like that. Anyway this is very good Step by Step guide for your ...


0

Active directory over NAT is neither tested nor advised by Microsoft: https://support.microsoft.com/en-us/kb/978772 There seems to be a solution though: https://blogs.technet.microsoft.com/enterprisemobility/2009/04/22/dcs-and-network-address-translation/


2

Your best bet is to setup squid in transparent mode, but your network diagram would change. As the proxy server would NAT, that would replace your cisco as a router too. (and while at it, why not remove your ISP router to not double NAT ?? as if someday you want to create some VPN, you can't in double-NAT) See a tutorial there; http://xmodulo.com/squid-...


0

Yes the cisco asa 5500 series can support l2tp/ipsec firewalls and the native windows client can be used to connect to them.



Top 50 recent answers are included