Tacacs server authentication issue in checkpoint smartconsole

Manoj_Tiwari — Thu, 12 Apr 2018 17:53:16 GMT

I have a tacacs server in one of my client to for the user authentication. I have done all the configuration in tacacs and it is working perfectly in other vendor product and checkpoint WEBGUI and CLI login. But in the case of smartconsole it is not authenticated.

I have followed this procedure for the smartconsole user authentication:

How to Setup Authentication for Admins – WebUI / SSH/ SmartDashboard – Check Point GAIA | Indeni

Also, could i use same user that I have created for smartconsole login using tacacs server to the vpn user authentication by adding that user to the vpn access user group?

This is the log message that I get in tacacs server while smartconsole authentication is failure:

Apr 12 16:35:16 localhost tac_plus[6508]: connect from 10.10.10.250 [10.10.10.250]
Apr 12 16:35:16 localhost tac_plus[6508]: Error 10.10.10.250 : Invalid AUTHEN/START packet (check keys)

Re: Tacacs server authentication issue in checkpoint smartconsole

Wei_Soon_Heng — Wed, 13 Oct 2021 06:29:39 GMT

Hi Manoj,

I am facing the same issue, how do u resolved it?

Re: Tacacs server authentication issue in checkpoint smartconsole

tmorgan — Wed, 13 Oct 2021 07:56:16 GMT

Two questions:

What technology are you using for authenication, ACS, ISE, TAC-Plus etc? Is it configured for TACACS or TACACS+?

Check keys suggests shared secrets between the two boxes are not matched.

Cheers,

Tom

topic Tacacs server authentication issue in checkpoint smartconsole in General Topics

Tacacs server authentication issue in checkpoint smartconsole

Re: Tacacs server authentication issue in checkpoint smartconsole

Re: Tacacs server authentication issue in checkpoint smartconsole