- Pulse Secure Community
- :
- About lto_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
lto_
Occasional Contributor
13
Posts
0
Kudos
0
Solutions
08-26-2009
05:51:AM
Hi aeroplane, I can respond for the Q2 part 2 question. If a DHCP server is used for several subnets, your will have to use a DHCP relay to forward the DHCP discover messages. Usually, the router which acts as the gateway for the subnet will have this role. See http://en.wikipedia.org/wiki/Dhcp#DHCP_Relaying for more info.
... View more
08-26-2009
05:45:AM
Hi Zubin, I am sorry, the environment described in this thread does not use 802.1X, only layer 3authentication. You might want to create a new thread for your issue ;) Message Edited by lto on 08-26-2009 05:46 AM
... View more
08-17-2009
12:40:AM
Hi Krishna, your scenario is definitely workable. You might want to check the Administration Guide from Juniper, as it is really well written: http://www.juniper.net/techpubs/software/uac/3.0/ In your case, I would check the chapter 4, called "The UAC RADIUS Server and Layer 2 Access". You might also want to check chapter 10 about the remediation. Regards
... View more
07-28-2009
03:09:AM
Hi, are you sure about your ports? Try 1645 and 1646, I believe Juniper default to these ports.
... View more
05-14-2009
02:42:AM
Hi, I am a bit confused with the license system of Odyssey Access Client. Here is the thing. We have a network with a couple of Infranet Controllers. Our users use only layer 3 authentication with OAC, and we use SSGs to dynamically protect access to our resources. Let's say we have a 250 users license on the IC and the OAC is deployed from the appliance to users. So basically, OAC can be installed on more than 250 workstations, but only 250 computers will be able to authenticate on the IC at the same time, right? What I want to know is: may I use and distribute the OdysseyAccessClient.msi from my IC box to another group of users who will not use layer 3 authentication (as my regular users) but layer 2 802.1X authentication with a non Juniper RADIUS server? What I don't get is how the license for OAC "works". What prevents me to use the OAC that comes with my IC (with a valid license in it) as a 802.1X regular supplicant in a non-UAC network? Many thanks, this board is great.
... View more
04-14-2009
06:50:AM
In fact, when you look into it, I will be limited by the number of concurrent IPsec tunnels and source IP users on my firewalls before the max authenticated users on the IC.
... View more
03-31-2009
02:02:AM
He he, ok. Thanks for your help edit: yay! go Giants (even if I don't really know how they're doing this year, I'm from Europe and this isnot my cup of tea ;-) ) edit2: what about those numbers, but whith a 6500 appliance? Message Edited by lto on 03-31-2009 02:10 AM
... View more
03-30-2009
02:43:AM
Thanks a lot Manoj, I'll try to install the 3.0 release this afternoon and let you know.
... View more
03-30-2009
02:24:AM
Hi, there is no more than 1 minute difference between those two devices. In fact they are using the same NTP server.
... View more
03-30-2009
01:25:AM
Hello good people, I am experiencing issues when trying to use Kerberos to authenticate my users. First of all, I am using: IC 6000, standalone, 2.2R4 Windows Server 2008 with AD as my authentication server When using a simple LDAP bind to authenticate my users, no problem, everything works smoothly. But, when trying to use Kerberos, it all goes wrong. Is there some kind of trouble between AD2008 and IC? I am positive about the admin credentials I am providing to the IC (no 'domain\' before the username) and the ip address of the server (in the same subnet of the IC, but I still get an error like admin credentials are wrong, or the server is not a domain controller. I was able to add the IC to the domain once, that was when I provided the FQDN of the DC instead of the IP address, but I still had the same error when I hit the 'Test Configuration' button. Thanks a lot, Thomas edit: It says on the documentation, in the part 'Multi-Domain User Authentication', that IC supports only Windows 2000 and Windows 2003. Although I only have one domaine, does this part apply to my problem? Cause it could explain a lot of things :-D Message Edited by lto on 03-30-2009 01:40 AM
... View more
03-27-2009
02:37:AM
Many thanks for your answer, JintsFan :-) I guess it will be closer to 10 new session per second as the Host Checker policy we're using is really simple. edit: are these numbers published anywhere on the website? I could not find them, which is why I created a topic on the board. Message Edited by lto on 03-27-2009 02:39 AM
... View more
03-26-2009
04:01:AM
Hi, I have questions about the number of users and sessions an IC can handle. We are currently using layer 3, as 802.1X is handled by another device. We are also using a couple of ISG 1000 as Infranet Enforcers. To authenticate users, OAC is installed on stations and is using the Windows password. Authentication server is the Active Directory, but we are using LDAP requests and not Kerberos. My questions are: How many new user sessions per second a single IC6000 can accept? How many user sessions a single IC6000 can maintain? What about these numbers in a cluster of 2, 3, or 4 ICs? We are currently using UAC 2.2 R3. Is this the same for 2.2 R4 or the new 3.0 R1? I am interested by every info regarding the performance of the IC. Thanks a lot, Thomas
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
