AnsweredAssumed Answered

Tacacs server authentication issue in checkpoint smartconsole

Question asked by Manoj Tiwari on Apr 12, 2018

I have a tacacs server in one of my client to for the user authentication. I have done all the configuration in tacacs and it is working perfectly in other vendor product and checkpoint WEBGUI and CLI login. But in the case of smartconsole it is not authenticated.

 

I have followed this procedure for the smartconsole user authentication:

How to Setup Authentication for Admins – WebUI / SSH/ SmartDashboard – Check Point GAIA | Indeni 

 

Also, could i use same user that I have created for smartconsole login using tacacs server to the vpn user authentication by adding that user to the vpn access  user group?

 

This is the log message  that I get in tacacs server while smartconsole authentication is failure: 

 

Apr 12 16:35:16 localhost tac_plus[6508]: connect from 10.10.10.250 [10.10.10.250]
Apr 12 16:35:16 localhost tac_plus[6508]: Error 10.10.10.250 : Invalid AUTHEN/START packet (check keys)

Outcomes