RADIUS and CHECKPOINT and NORTEL

Question

I have installed the NMAS modules from Border Manager 3.8 onto a Netware 6 SP3 box. I installed per TID 10078616 and can authenicate from my W2K workstation fine.
I am now trying to authenicate from a Nortel switch and a VPN from a checkpoint firewall. So far I have installed all of the login methods and I still get an unknown RADIUS client on the RADIUS server, when loging in from the Nortel switch. I have not tried to authenicate from the checkpoint firewall yet.
Does anyone have pointers as to the configuration to use the RADIUS server with Nortel or Checkpoint or a pointer to a technical description of the various login methods?
John

Answer 1

John,
I have a very similar problem with our 3com switches, can you give me more
details of what you did to get it working?
Thanks a lot,
Matt Hudson
(CNE6.5)
"John Curran" <[email protected]> wrote in message
news:[email protected]...
> Thank you very much, Jordack. The instructions were clear and concise.
>
> We go the Checkpoint firewall to authenicate VPN's with the RADIUS server.
>
> Also, I got the information from Nortel to allow authenication. I had to
> set up the Radius server to allow Service-Type Administrative and
> Service-Type NAS-Prompt. Then I had to go into each user and set up
> one of the service types.
>
> Thanks for your help.
>
> John
>
>
> >>> Jordack<[email protected]> 01/26 9:36 AM >>>
> I uploaded a quick draft guide. It should help.
>
> http://www.thiscorner.com/guides/cp-radius.pdf
>
> Jordack
>
> "John Curran" <[email protected]> wrote in message
> news:[email protected]...
> > Thanks for the input. I will get that book.
> >
> > With the Nortel switch it is curious. I had forgotten to add the switch
> > to the client list. When I did, the radius server accepts the
> > authenication and sends an accpt message, but the Nortel switch says
> > access denied. I put a Sniffer on the link and the accept message looks
> > just like any other accept message (follows RFC 2865). I have a feeling
> > Nortel does not follow RFC 2865 or does not like the authenication ID
for
> > some reason. I guess I will have to work more with Nortel to resolve
that
> > one.
> >
> > John
> >
> >
> >>>> Jordack<[email protected]> 01/26 7:53 AM >>>
> > Sorry about not responding, I saw your post and meant to dig up my
notes
> > and respond.
> >
> > I don't know much about the Nortel stuff.
> >
> > Make sure you have added the IP address of your Nortel and Checkpoint
box
> > to
> > the 'Clients' page of the 'Radius:Dial access System". The DAS will
only
> > except connections from known clients. From the sounds of it that might
> > be
> > the issue.
> >
> > For the CheckPoint Setup stuff there is a few things you will need to do
> > on
> > the Checkpoint Box.
> >
> > I used this book http://www.syngress.com/catalog/chapter.cfm?pid=25903
and
> > Everything worked.
> >
> > I was working on a small guide for CheckPoint radius but got pulled to
> > other
> > things. If I get it finished Ill post it
> >
> >
> > "John Curran" <[email protected]> wrote in message
> > news:[email protected]...
> >>I have installed the NMAS modules from Border Manager 3.8 onto a Netware
6
> >>SP3 box. I installed per TID 10078616 and can authenicate from my W2K
> >>workstation fine.
> >>
> >> I am now trying to authenicate from a Nortel switch and a VPN from a
> >> checkpoint firewall. So far I have installed all of the login methods
> >> and
> >> I still get an unknown RADIUS client on the RADIUS server, when loging
in
> >> from the Nortel switch. I have not tried to authenicate from the
> >> checkpoint firewall yet.
> >>
> >> Does anyone have pointers as to the configuration to use the RADIUS
> >> server
> >> with Nortel or Checkpoint or a pointer to a technical description of
the
> >> various login methods?
> >>
> >> John
> >>
> >
> >
> >
> >
>
>
>
>