topic Re: Active Directory Based VPN on 1590 Local Managed Unit in Spark Firewall (SMB)

Active Directory Based VPN on 1590 Local Managed Unit

jfelix — Wed, 21 Apr 2021 10:21:01 GMT

Hi all,

Struggling to get remote access VPN working via Active Directory Authentication. I have vpn working with local authentication.

VPN is configured for l2tp.

I can query to Active Directory to add groups into permissions, so the firewall is reading AD config okay.

I have searched high and low on checkmates and checkpoint KB;s to try to find info on the setup, but all i am finding are posts by users that have it already setup. Reading the manuals on the unit don't spell out the config that is necessary, just that it is capable of it.

Currently when i attempt to sign in to the VPN using an account on the configured AD, I get the attached error.

where am i going wrong?

Re: Active Directory Based VPN on 1590 Local Managed Unit

G_W_Albrecht — Wed, 21 Apr 2021 10:58:33 GMT

What happens if you use Check Point Endpoint Security VPN client instead ?

Re: Active Directory Based VPN on 1590 Local Managed Unit

jfelix — Wed, 21 Apr 2021 11:06:30 GMT

Yeah same error around unable to generate radius request

Re: Active Directory Based VPN on 1590 Local Managed Unit

G_W_Albrecht — Wed, 21 Apr 2021 13:08:24 GMT

I would contact TAC to get it resolved.

Re: Active Directory Based VPN on 1590 Local Managed Unit

Alan_Walker — Wed, 21 Apr 2021 14:13:46 GMT

I have done this many times, by selecting Add - Active Directory Group, and select the group you want to use.

The group should have the allowed vpn users in it. Or you can use all users if you do not want a group.

Your error shows a RADIUS auth problem. Have you defined a RADIUS server also?

Re: Active Directory Based VPN on 1590 Local Managed Unit

jfelix — Wed, 21 Apr 2021 22:48:46 GMT

No Radius Server configured at all. The error combined with the fact i haven't configured a radius server is why i am posting & about to log a ticket. As the error doesn't match the config.