- Pulse Secure Community
- :
- About kronicklez_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
kronicklez_
Contributor
31
Posts
0
Kudos
0
Solutions
01-01-2013
07:28:AM
Hi apaul, many thanks for your feedback ....Yes, i think what u say is may be correct. Is there any reference or url (specific) that show what check list/return list attribute that we can use between SBR and Trapeze? Thanks and appreciate someone feedback especially with exprience using profile between SBR and Trapeze. Thanks again.
... View more
12-31-2012
08:48:AM
Hi Kalagesan, Many thanks for your feedback. Currently i'm already success to authenticate Wireless Trapeze but has slight changes from that u advise " Make/Model should always be Standard Radius - I choose trapeze network". Another question when i try to use profiles and assign it to native user then i cannot login it? Previously i don't have a problem to use profiles when it related to devices that using Junos because it easy to understand (JTAC give document) the check list / return list attribute. But how about if that devices is not using Junos such as Trapeze. Can u give / share a url reagrding this subject? Thanks and appreciate your feedback,
... View more
12-30-2012
06:22:PM
Hi All, Need your help regarding what need to configure with SBR to make sure the Wireless user can authenticate using dot1x (WPA). Currently i've no problem to configure the Wireless Controller but not sure what need to configure on SBR. What i try to achived is simple. All the username of Wireless User will be store in SBR (Native User). That's all and it's not involve involve AD or anything else: 1.) Do i need to create certificate on SBR to make sure the client (notebook) can use dot1x 2.) Do i need to create profile and what attribute (return list / check list) need to be put in. Hope someone can guide because i'm blind what need to configure in SBR. Thanks and appreciate someone guide.
... View more
05-09-2012
10:54:AM
Hi df, I'm new for this product SSL VPN. Currently this is demo unit and i want to learn how to use this product. I know i'm not expert as u. I'm not sell this product but i'm try to learn how to use this prodcut. Hopefully u can understand before u make judgement.
... View more
05-08-2012
10:27:AM
Hi Zanyterp, Thanks for your feedback. So u mean it's ok if i just use one port only on MAG4610 to make SSL VPN and at the same time that ip address for that port is same with segment my internal LAN? Appreciate your feedback. Thanks
... View more
05-07-2012
07:30:PM
Hi Mutt / All, Another question is there need to use 2 port in MAG4610 to make SSL VPN or just enough using 1 port. Appreciate someone feedback. thanks
... View more
05-06-2012
03:16:AM
Hi Mutt, Thanks for giving step. How about in SSG? Is there any specfic config need to turn on? Thanks and appreciate your feedback.
... View more
04-26-2012
08:59:PM
Hi zanyterp, Currently my bos told me not to involve JTAC because if have a problem then we can open JTAC. Because if we open JTAC just because to make them to show how to config SSL VPN it will redeuce partner point. So that's why i need to search some alternative. Thanks.
... View more
04-25-2012
11:45:PM
Hi Mutt, Currently i want to do from anywhere can access my office using SSL VPN (MAG4610).....Our office is just small not have server. The purpose is i want to make my Juniper lab can be access from anywhere (SSL VPN)....but i'm not have exprineced configure SSL VPN and MAG4610. So tha't make difficult to me. Hopefully u can show step by step how to configure in MAG. Thanks
... View more
04-25-2012
11:41:PM
Hi Mutt, Many thanks for ypur feedback. I follow this URL but not detail what the step...http://www.juniper.net/techpubs/en_US/sa7.1/topics/concept/secure-access-configuring-overview.html ....regarding to your explanation SA2000, u mean that's refer to MAG4610 right? Thanks and appreciate your feedback..
... View more
04-20-2012
12:21:AM
Hi zanytrep, Thanks for the url... i already read the doc in the url given. But still not really undertand. Is there any video (step) for SSL VPN setup using MAG for example (IC4500) in KB.....One more thing, is it enough requiremet to do SSL VPN if i just have SSG and MAG? Thanks appreciate your feedback.
... View more
04-19-2012
01:06:AM
Hi All, Many thanks for all the feedback. Another help if someone can give the url (KB) / doc how to setup MAG4610 as SSL VPN (step-by-step). I try to search in KB but not found any step-by-step. Below is the my network. Internal LAN (MAG4610) ---->SSG5 ----> Internet For your information i dont have any server. It just a simple network and to make sure i can remote from anywhere to my Internal LAN. Hope someone can help me. Thanks
... View more
04-16-2012
09:24:PM
Hi all, I have buy new MAG4610. So my question can i use this device for both feature as per title above at the same time? Thanks and appreciate someone feddback.
... View more
06-10-2011
05:54:AM
Hi All, One question regarding configuring UAC, do we need to use both interface at UAC (Internal & External)? Some document just show using internal port but some doc told to use both interface. Can someone calarify.? Thanks n very appreciate feedback..
... View more
06-10-2011
04:20:AM
Hi Spuluka, many thanks your feedback. Currently i follow this step..http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB12722&actp=search&viewlocale=en_US&searchid=1307704122113_ but still not success. I will try using your link given. Thanks.
... View more
06-09-2011
06:53:PM
HI All, I'm new in UAC product. I already read user guide for configuring UAC (OS 3.1) but still not understand what step need to do a Layer 2 enforcemnt in UAC.Below is my topology. Hopefully somenone can guide by using step-by step. The plan that i want to do is user must login then if the username exist it can access network but if not it automaticcaly go to guest vlan. I already stuck 3 days. Very2 appreciate your help... PC---->EX4200--->CoreSwitch --->EX4200 (Server Farm)---> UAC.
... View more
01-17-2011
12:04:AM
Hi overburdened, JTAC case 2011-0116-0218. I already test with another Radius client (Another Ex4200) but the result still same. cannot login using NATIVE user in the SBR.
... View more
01-16-2011
11:44:PM
Hi overburdened , I already open JTAC. In the while waiting JTAC response is therer any other method to solve this problem. Thanks.
... View more
01-16-2011
11:24:PM
Hi overburdened , In the authentication policy list the active that i made is Native user. One question, where can look the serial no of SBR. I think to open JTAC but usually to open JTAC need serial no of the hardware right? How i can look the SN of my SBR. Thanks
... View more
01-16-2011
10:36:PM
Hi overburdened, How i can verify that Native User is active in the list of Authentication Policies? Is it have some command or etc?
... View more
01-16-2011
10:03:PM
Hi overburdened Yes 192.168.1.36 is EX4200 (vlan.0). I already upload GUI SBR that u request.Hopefully this problem can be solve without open JTAC. Very appreciate your kindness solution. Thanks again
... View more
01-16-2011
09:39:PM
Hi overburdened, I think i already try combination what u said. Below is the config at Switch. The problem is i cannot login the switch if i use the username in NATIVE user (SBR). But if i use a local username it dont have problem. In SBR i just install it to Windows Server 2003 without SQL or any database. Appreciate ypur feedback. Ex4200> show configuration system | match radius | display set set system authentication-order radius set system radius-server 10.10.10.11 secret "$9$5Tz6CA0IEy36ylvMXxjHk" set system accounting destination radius server 10.10.10.11 secret "$9$EvRhSeMWxdb2re24JZjitu0" EX4200> show configuration system login | display set set system login user admin uid 2001 set system login user admin class superuser set system login user admin authentication encrypted-password "$1$Ifc0UrFb$47x14anwF3flXEc5b2RXM."
... View more
01-16-2011
09:11:PM
Hi overburdened , I don't get what u mean? in SBR i already add native user with password. In Client (EX4200) it just have local user. What u mean regarding client password? Thanks n appreciate your reply.
... View more
01-16-2011
05:40:PM
Hi Paul, I already do a instruction that u ask. Below is the log i get. Hopefully have someone can reply this thread. Thanks. 01/17/2011 09:35:20 ----------------------------------------------------------- 01/17/2011 09:35:20 Packet containing 44 bytes successfully sent 01/17/2011 09:35:20 Sent reject response 01/17/2011 09:35:20 F:\build\tmp.3\SBR\xradius\radauthd.c radAuthHandleRequest() 3805 Exiting 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 Authentication Request 01/17/2011 09:35:37 Received from: ip=192.168.1.36 port=56045 01/17/2011 09:35:37 01/17/2011 09:35:37 Raw Packet : 01/17/2011 09:35:37 000: 01920041 7532239e c67f3050 e630c452 |...Au2#...0P.0.R| 01/17/2011 09:35:37 010: aede3d03 01084841 52524953 02129c82 |..=...HARRIS....| 01/17/2011 09:35:37 020: 7d597236 66593f5c 7377eb6c 0128200d |}Yr6fY?\sw.l.( .| 01/17/2011 09:35:37 030: 44332d4c 31382d45 53303104 06c0a801 |D3-L18-ES01.....| 01/17/2011 09:35:37 040: 24 |$ | 01/17/2011 09:35:37 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 F:\build\tmp.3\SBR\xradius\radauthd.c radAuthHandleRequest() 3050 Entering 01/17/2011 09:35:37 Looking up shared secret 01/17/2011 09:35:37 Looking for RAS client 192.168.1.36 in DB 01/17/2011 09:35:37 Matched 192.168.1.36 to RAS client D3-L18-ES01 01/17/2011 09:35:37 Parsing request 01/17/2011 09:35:37 Initializing cache entry 01/17/2011 09:35:37 Doing inventory check on request 01/17/2011 09:35:37 Getting info on requesting client 01/17/2011 09:35:37 NAS-IP-Address in request: 192.168.1.36 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 Authentication Request 01/17/2011 09:35:37 Received From: ip=192.168.1.36 port=56045 01/17/2011 09:35:37 Packet : Code = 0x1 ID = 0x92 01/17/2011 09:35:37 Client Name = D3-L18-ES01 Dictionary Name = Juniper.dct 01/17/2011 09:35:37 Vector = 01/17/2011 09:35:37 000: 7532239e c67f3050 e630c452 aede3d03 |u2#...0P.0.R..=.| 01/17/2011 09:35:37 Parsed Packet = 01/17/2011 09:35:37 User-Name : String Value = HARRIS 01/17/2011 09:35:37 User-Password : Value = 01/17/2011 09:35:37 000: 9c827d59 72366659 3f5c7377 eb6c0128 |..}Yr6fY?\sw.l.(| 01/17/2011 09:35:37 NAS-Identifier : String Value = D3-L18-ES01 01/17/2011 09:35:37 NAS-IP-Address : IPAddress = 192.168.1.36 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 Determining if request is for a tunnel 01/17/2011 09:35:37 Determining if this radius should act as a proxy 01/17/2011 09:35:37 Determining user class 01/17/2011 09:35:37 Authenticating user HARRIS with authentication method Native User 01/17/2011 09:35:37 Authenticating user HARRIS with authentication method Windows Domain User 01/17/2011 09:35:37 Authenticating user HARRIS with authentication method Windows Domain Group 01/17/2011 09:35:37 Unable to find user HARRIS with matching password 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 Authentication Response (reject) 01/17/2011 09:35:37 Packet : Code = 0x3 ID = 0x92 01/17/2011 09:35:37 Vector = 01/17/2011 09:35:37 000: 0f05dae4 e3673297 ecfb8c7b 14092ef5 |.....g2....{....| 01/17/2011 09:35:37 Reply-Message : String Value = Unauthorized User !!! 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 Authentication Response (reject) 01/17/2011 09:35:37 Sent to: ip=192.168.1.36 port=56045 01/17/2011 09:35:37 01/17/2011 09:35:37 Raw Packet : 01/17/2011 09:35:37 000: 0392002c 0f05dae4 e3673297 ecfb8c7b |...,.....g2....{| 01/17/2011 09:35:37 010: 14092ef5 1218556e 61757468 6f72697a |......Unauthoriz| 01/17/2011 09:35:37 020: 65642055 73657220 21212120 |ed User !!! | 01/17/2011 09:35:37 01/17/2011 09:35:37 ----------------------------------------------------------- 01/17/2011 09:35:37 Packet containing 44 bytes successfully sent 01/17/2011 09:35:37 Sent reject response 01/17/2011 09:35:37 F:\build\tmp.3\SBR\xradius\radauthd.c radAuthHandleRequest() 3805 Exiting
... View more
01-14-2011
02:58:AM
Hi Paul, Thanks again for your feedback. I will give the ouput request at Monday. Thanks again.
... View more
01-14-2011
01:08:AM
Hi Paul, Finally have someone response regarding to my problem. Many thanks Paul. I already at Return list Service-Type = Administrative but still not function. Still cannot login to equipment using username n passowrd in SBR. Currently i justinstall SBR to Windows XP. Appreciate ypur response. Thanks again. Is therer any other way ?
... View more
01-13-2011
09:34:PM
H all, Below is the log i found in SBR. 01/14/2011 13:31:10 request items don't match user/profile items, Rejecting 01/14/2011 13:31:10 Sent reject response 01/14/2011 13:31:25 request items don't match user/profile items, Rejecting 01/14/2011 13:31:25 Sent reject response
... View more
01-13-2011
06:57:PM
Hi All, I'm new in configuring SBR Juniper?. I'm use this url below as a reference. I cannot login to switch/equipment (EX series) using a username & password that has been configured in SBR. But i can see the log event in SBR that someone try to attempt access to the switch. FYI i just seting the basic config in SBR such as create radius client (EX) & User (Native). Is there special thing we need to put in Native user such as Attribute? Could someone verify if my switch config is corrrect as per below. Thanks. http://www.techietips.net/juniper-radius-cisco-ios EX4200 config authentication-order [ radius password ]; radius-server { 10.10.18.11 secret "$9$LPIX7VsYoGDk-Vk.f5F3yle"; ## SECRET-DATA } accounting { events interactive-commands; destination { radius { server { 10.10.18.11 secret "$9$EvRhSeMWxdb2re24JZjitu0"; ## SECRET-DATA } } } }
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
