topic Re: VPN Clients Authentication with Certificate and User And Password in SASE and Remote Access

VPN Clients Authentication with Certificate and User And Password

Stefano_Bucci — Tue, 24 Mar 2020 14:58:48 GMT

Hi all,

I know maybe this is something already seen in the past, but I'm not able to find any info about this.

I also checked the sk86240 but i'm running on R80.30.

Actually I'm working in a LAB environment preparing a production set.

We have a DC and if I use as authentication method user and psw I'm able to log in.

I also used only certificate as authentication method with both external CA certificates generate by me and adding the external server CA, and also certificate generated by the internal_CA with the enrollment and everything works.

What I'd like to do is to authenticate users with a personal certificate signed by an external CA and then authenticate the user by AD user and password.

Behavior is strange, once certificate authentication passed once I have to put username and password the username field is not editable and keep the cn of the certificate issued by the internal ca.

Do you have some advise?

Thanks

Re: VPN Clients Authentication with Certificate and User And Password

G_W_Albrecht — Tue, 24 Mar 2020 16:02:53 GMT

Did you read the Mobile Access Administration Guide R80.10 p.141ff ?

Re: VPN Clients Authentication with Certificate and User And Password

Stefano_Bucci — Tue, 24 Mar 2020 16:50:39 GMT

Hi, yes I did.

My case is different, I think

Re: VPN Clients Authentication with Certificate and User And Password

G_W_Albrecht — Wed, 25 Mar 2020 09:08:15 GMT

Maybe try Remote Access VPN Administration Guide R80.10 p.32 ff ?

Re: VPN Clients Authentication with Certificate and User And Password

Stefano_Bucci — Wed, 25 Mar 2020 16:26:37 GMT

Hi, same there. My case I think it's more complicated.

Thanks

Re: VPN Clients Authentication with Certificate and User And Password

PhoneBoy — Mon, 30 Mar 2020 02:24:50 GMT

Does the authentication still actually work when you combine the two or does it fail?
Might be worth getting the TAC involved here.

Re: VPN Clients Authentication with Certificate and User And Password

Stefano_Bucci — Mon, 30 Mar 2020 07:31:56 GMT

Hi PhoneBoy,

actually is still not working. I'll do some further test and then I'll go stight to the TAC.

Thanks, maybe I'll post the solution if it worth it.