Why do I need PAP enabled on Windows for an ASA5510 to use Radius?
We have an ASA that allows remote VPN users. It connects to a Windows 2008 server. That server connects to a radius server, also Windows 2008. Things work fine if we enable PAP on the radius server, and the remote site server. If we disable PAP on either one, we lose the ability to authenticate.
I would prefer to not use PAP.
thanks.
Hello,
The ASA supports the following authentication methods with RADIUS:
•PAP—For all connection types.
•CHAP and MS-CHAPv1—For L2TP-over-IPsec connections.
•MS-CHAPv2—For L2TP-over-IPsec connections, and for regular IPsec remote access connections when the password management feature is enabled. You can also use MS-CHAPv2 with clientless connections.
•Authentication Proxy modes—Including RADIUS to Active Directory, RADIUS to RSA/SDI, RADIUS to Token-server, and RSA/SDI to RADIUS connections,
so the default is PAP, but you can enable MS-CHAPv2 by configuring "password management" under tunnel-group.
Hope this helps
Mashal Shboul
Similar Messages
-
why cant i download itunes on my windows 7 pc? i used to have itunes on my pc once but it was not uploded for a while and got deleted...and now i have tried to download it and all i got was "thanks for download itunes"...after that i have tired to dwnload it from another web browser and ive got the same thing.....!!
Perhaps try downloading and saving a copy of the installer to a different PC. (If you're on a 32-bit Windows system, try to download on a different 32-bit Windows system.) Copy the iTunesSetup.exe installer to an external hard-drive, or a large-enough thumb drive or burn it to a CD-R. Carry the installer back to your PC, copy the installer to your hard drive. (Don't run the install from the ExHD, thumb or CD-R.) Start the install by doubleclicking the iTunesSetup.exe file.
-
Why do I need to convert QT movies for my ipad2?
Why do I need to convert QT movies for my ipad2?
Becuase the iPad only reads certain video formats you will need to convert them.
But luckily you can drag your video files into iTunes and select the iTunes menu command (from the Advanced menu) to convert the file into a iPad/AppleTV comatible format. Easy. -
Enable Secure communication for RFC destinations by using sm59 transaction
Dear friends,
We would like to enable secure communications for RFC destinations by using the sm59 transaction in our systems.
We need to do this manually, by changing the internal communication settings in a way they can communicate securely.
Any idea or advice on the way it can be done ?
We need to take each RFC, manually check it and secure it.
Thanks in advance,
JordanIn SM59 open up a RFC destination and go to Logon & Security. There you can enable Trusted relashionship and activate status of secure protocol.
And yes you have to do it manually for the desired RFC's -
Why my software needs Local Admin? Windows 7 App Compatibility
Hi
I have a software that works great on Windows 7
My problem is that I can run it only with local admin. if I'm logged in with a standard user - I get errors and the software doesn't open. no errors in the event viewer
Usually what I do in those cases is searching the registry or the folder that the user needs a modify permission and add it
Sometimes I use procmon if I can't find it manually.
in this case - procmon didn't help me :/. no "Access Denied" rows at all...
I tried to add the user to the "Power Users"\"Distributed COM Users" group and I still get the same error.
I tried to use the compatibility tab though the software works perfect on windows 7, my only problem is the prerequisite of local admin I'm trying to remove.
Is there any tool I can use to find out what the software does that requires local admin rights?
Tamir LevyHi,
Firstly please refer to this article to troubleshoot an application that cannot run as a standard user:
An Application Cannot Run as a Standard User
http://technet.microsoft.com/en-us/library/dd919180(v=ws.10).aspx
Some programs are designed to perform legitimate administrative actions and therefore require administrative permissions. There is no idea to run it without administrator.
Karen Hu
TechNet Community Support -
Hi can any body please tell me how to open the .exe files in mac and why it is not supported with unarchiever app , also i am not able to run and dvd's in my mac its not accepting any cd's or dvd'd why? do i need to do some pre defined settings to run the cd's and dvd's ?
A .exe file is a Windows executable. OS X does not run Windows programs. If you need to use .exe files then you will need to install Windows on your Mac:
Windows on Intel Macs
There are presently several alternatives for running Windows on Intel Macs.
Install the Apple Boot Camp software. Purchase Windows XP w/Service Pak2, Vista, or Windows 7. Follow instructions in the Boot Camp documentation on installation of Boot Camp, creating Driver CD, and installing Windows. Boot Camp enables you to boot the computer into OS X or Windows.
Parallels Desktop for Mac and Windows XP, Vista Business, Vista Ultimate, or Windows 7. Parallels is software virtualization that enables running Windows concurrently with OS X.
VM Fusionand Windows XP, Vista Business, Vista Ultimate, or Windows 7. VM Fusion is software virtualization that enables running Windows concurrently with OS X.
CrossOver which enables running many Windows applications without having to install Windows. The Windows applications can run concurrently with OS X.
VirtualBox is a new Open Source freeware virtual machine such as VM Fusion and Parallels that was developed by Solaris. It is not as fully developed for the Mac as Parallels and VM Fusion.
Note that Parallels and VM Fusion can also run other operating systems such as Linux, Unix, OS/2, Solaris, etc. There are performance differences between dual-boot systems and virtualization. The latter tend to be a little slower (not much) and do not provide the video performance of the dual-boot system. See MacTech.com's Virtualization Benchmarking for comparisons of Boot Camp, Parallels, and VM Fusion. Boot Camp is only available with Leopard or Snow Leopard. Except for Crossover and a couple of similar alternatives like DarWine you must have a valid installer disc for Windows.
You must also have an internal optical drive for installing Windows. Windows cannot be installed from an external optical drive. -
Why do i need outlook 2007 or 2010 for i cloud
why do i need outlook 2007 for i cloud i dont understand.
iCloud will still work for free, i.e sync your contacts between ios devices and the cloud (icloud.com) but for the calendar and addresses to sync with a windows PC you will need outlook 2007+.
However as you dont use that part at the moment i'm sesning no great loss - icloud bookmarks and photo stream will sync with a windows pc without outlook so the rest of icloud will still work for you for free -
Suddenly firefox has started opening a new, separate browser window for every link and thing I open. It used to just open a new tab in the current browser. I must have closed down 15 browsers when trying to get back to a previous web page - the back button doesn't work when each click leads to a new window opening! I went into options and my settings have not changed, they still say "open new tab" for links. This just started happening out of the blue today. What's up?
Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
* Don't make any changes on the Safe mode start window.
See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]
If it does work in Safe-mode then disable all your extensions and then try to find which is causing it by enabling one at a time until the problem reappears.
* Use "Disable all add-ons" on the [[Safe mode]] start window to disable all extensions.
* Close and restart Firefox after each change via "File > Exit" (Mac: "Firefox > Quit"; Linux: "File > Quit") -
Need to enable autoreload feature for servlet in Tomcat
Hello
I wants to enable autoreload feature for servlet in tomcat so that i need not to stop tomcat 4.0 web server again and again
Thankshttp://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/context.html
It is amazing what reading the manual might do for ya. -
Need help with installing Windows for the bar exam
I need to retake the bar exam in Feb 2011 and I've decided to switch to typing. I am trying to figure out what Windows I need (the software says XP is fine but is that even available anymore)- so can someone walk me through this process? I've partioned my hard drive with the default 5GB but should it be more?
I'm looking at buying Windows- is XP okay or should I shell out for 7-i.e. is one more compatible with Macs?
And then finally, in the installation instructions they mention that I need my Mac OS disc for the process- is that the snow leopard disc or something else? My discs are in storage right now so should I wait until I get them before starting this process or can I get replacements if I accidentally threw them out in moving?
Sorry for all the questions, but well, I'm racing to get everything done and I want to make sure I don't crash my system halfway through the exam!You don't need Boot Camp, but even XP will have a lot of stuff to update from after the install, and that takes temp space. Just as your Mac shows 5-10GB there is add'l hidden space used.
Apple's 'requirements' has gotten others in trouble and I was pretty sure it was more like 10GB. Plus a lot of XP discs are now SP3.
XP out of the box but connected to the net is just waiting for malware, average is 15 minutes to be infected. 7 is better and just in case you need it again.
System Builder can come in 32 or 64-bit but XP is 32-bit only.
VirtualBox by Oracle is a free VM.
1GB for one program actually seems like a lot, or is that RAM requirement? -
Why do you need to enable http communication with Basic authentication with Exchange Admin IP?
The pre-reqs for the Exchange Admin IP say you have to make a few changes on your Exchange server (2010 on prem in my case). I have a few questions about those pre-reqs and I'm not able to find documentation online to help:
Why does http communication with basic authentication for the powershell virtual directory in IIS need to be enabled? In the IP you still specify to connect over an SSL connection. The concern is what is being sent over unencrypted and what impacts are
there to the security of the Exchange server.
What role does the IP connect to (MBX/CAS/HT)? I'm not an Exchange guy so I don't know which roles install the PowerShell virtual directory.
Are there any technet pages or white papers that talk about the MS developed IPs in any more detail than basic config?
I appreciate any help anyone can offer. Thanks!
-RajYeah I find this perplexing as well. I'm guessing it has something to do with Opalis origins perhaps.
Would be good to understand why. -
Why do I need to jiggle the window to get firefox to work?
When I try to click on something inside a window I get that small gray circle that spins. I have to move the entire window a little to get the small green circle to start spinning, then the thing I clicked on comes up. Sometimes it can just hang there and time out.
Check your network connection on run in start menu write "ping then one space then your DNS address then space then -t" and click on ok after some process on your command prompt window press ctrl+C then see wheather your receiving is equal or less the sending. If it is less then your network connection is running very slow if equal or more then network is good. You can also do this in command prompt window by writing the same ping statement.
-
Why do we need to enable force logging our primary database ?
hi ,
thanks in advanceHello;
You need this to ensure the Standby database contains everything that occurs in the Primary database.
If it helps, think of Data Guard as 1 database with two pieces in different modes. One side is always in Primary mode. Therefore the Standby needs to be an exact copy of whichever side is Primary.
Best Regards
mseberg -
My passcode stopped working today and now my phone is disabled. Can I reset it w/o itunes?
Use the information in this support document http://support.apple.com/kb/ht1212
-
Why does data need to be turned on for group texting?
Why does single person text msg only need cell service, but group texting requires data turned on?
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
Maybe you are looking for
-
I went to the settings and entered my new account info with the new apple ID but everytime I try to download something it is asking me to enter the password for the old ID(which is disabled)
-
How can I play .caf files on Windows desktop computer
I have a voice/sound recording program called Recorder Pro on my iPhone5. It generates .caf files, which can be transferred to my desktop computer while the phone is connected, using iTunes/Apps (where the bottom left panel upon scrolling down has
-
How to create and instance of Java Object from an XML Document.
Hi, How can we use a XML Document to create an instance of Java Object and do vice versa ie from the Java Object creating the XML Document. XML Document is available in the form of a String Object. Are there helper class available to achieve this. I
-
Front Row 'Sources' not finding media server
Hi all! I use my Mac Mini as a media server for my apple TV and all my computers/macs with iTunes. Everything works fine apart from Front Row on my MacBook that only seems able to find my local machine under sources. Any ideas?
-
How do i compare Nodes on a home made List?
This is for one of my classes, I have this .java's: ******** Nodo.java ( node ) ******** public class Nodo{ public T t; public Nodo s; public Nodo(){ t=null; s=null; }******** Lista.java ( List ) ******** public class Lista{ private Nodo inicio; publ