VPN failed login on SMB1590

[#1]

Hello everyone,

If some one can help me out with this problem.
On our location we have Centrally managed SMB 1590, where we need to setup remote access for our users.

Connection to VPN goes well but when test user types in his local username and password he gets wrong username or password.
When checking logs for problems we see that failed login factor is password and reason is user unknown to FireWall-1 authentication. User is locally created and he is in VPN test group witch is participant user group for remote access. 

Does anyone knows what could be the reason for this error and what can we do to fix it up ?

Thank you in advanced,

Tomislav

[#2]

Hello everyone,

If some one can help me out with this problem.
On our location we have Centrally managed SMB 1590, where we need to setup remote access for our users.

Connection to VPN goes well but when test user types in his local username and password he gets wrong username or password.
When checking logs for problems we see that failed login factor is password and reason is user unknown to FireWall-1 authentication. User is locally created and he is in VPN test group witch is participant user group for remote access. 

Does anyone knows what could be the reason for this error and what can we do to fix it up ?

Thank you in advanced,

Tomislav

[#3]

Hello everyone,

If some one can help me out with this problem.
On our location we have Centrally managed SMB 1590, where we need to setup remote access for our users.

Connection to VPN goes well but when test user types in his local username and password he gets wrong username or password.
When checking logs for problems we see that failed login factor is password and reason is user unknown to FireWall-1 authentication. User is locally created and he is in VPN test group witch is participant user group for remote access. 

Does anyone knows what could be the reason for this error and what can we do to fix it up ?

Thank you in advanced,

Tomislav

[TomislavT]

Hello Val,

Here are VPN community and group.

[TomislavT]

Hello Val,

Here are VPN community and group.

[_Val_]

Where is the group definition? How do you set up users in the group? 

[_Val_]

Where is the group definition? How do you set up users in the group? 

[TomislavT]

User is made locally in Smart Console then added to VPN test group. 
What do you mean by group definition ?

[TomislavT]

User is made locally in Smart Console then added to VPN test group. 
What do you mean by group definition ?

[_Val_]

the invalid user error usually means a basic authentication issue: incorrectly defined user, group wrongly populated, etc. Your screenshots look fine so far, but you did not share user and group screenshots.

[_Val_]

the invalid user error usually means a basic authentication issue: incorrectly defined user, group wrongly populated, etc. Your screenshots look fine so far, but you did not share user and group screenshots.

[_Val_]

How do you know users can authenticate in the first place? Did you check them somewhere else?

[_Val_]

How do you know users can authenticate in the first place? Did you check them somewhere else?

[TomislavT]

I didn't check if they can authenticate somewhere else since most of that is done via LDAP.
On 6400 that we have all users and groups are connected via LDAP and checked with Identity Awareness.

This 1590 is part of new network and management server and we want to make user locally and do authentication locally or via ISE because that whole network is isolated from our LAN.

[TomislavT]

I didn't check if they can authenticate somewhere else since most of that is done via LDAP.
On 6400 that we have all users and groups are connected via LDAP and checked with Identity Awareness.

This 1590 is part of new network and management server and we want to make user locally and do authentication locally or via ISE because that whole network is isolated from our LAN.

[G_W_Albrecht]

Contact TAC to get his resolved quickly !

[G_W_Albrecht]

Contact TAC to get his resolved quickly !

[_Val_]

Second that. All settings look okay, please engage with TAC to fix this.

[_Val_]

Second that. All settings look okay, please engage with TAC to fix this.