Re: Cisco Router --> IAS Authentication

From: James McIllece [MS] (jamesmci_at_online.microsoft.com)
Date: 08/04/04


Date: Wed, 04 Aug 2004 14:46:36 -0700


"Chris Sommers" <someone@someplace.com> wrote in
news:uQXW7yWeEHA.2784@TK2MSFTNGP10.phx.gbl:

> Hello all,
>
> I have two Windows 2000 servers running IAS which are both configured
> exactly the same from a remote access policy standpoint. The routers
> I manage out in the field point to both servers for RADIUS
> authentication.
>
> The problem I'm having is when server A's IAS service is started, I
> try to log into the router and it successfully authenticates, but then
> gives me the message "This line may not run PPP." and kicks me out
> immediately. So I shut down IAS on server A, and this same router
> successfully authenticates with server B AND no longer gives me this
> error message.
>
> Again, identically configured servers. This problem happened to me
> when I first built server B, but then mysteriously disappeared and
> I've been running fine ever since. Any assistance would be
> appreciated!
>
> Chris
>
>
>

Hi Chris --

There may be some configuration difference between the two servers. You
might want to copy the config of server B to server A using the netsh
commands.

>From the Help:

To copy the IAS configuration to another server:

At a command prompt, type netsh aaaa show config <path>\file.txt. This
stores the configuration settings, including registry settings, in a text
file. The path can be relative, absolute, or a UNC path.
 
Copy the file you created to the destination computer, and at a command
prompt on the destination computer, type netsh exec <path>\file.txt. A
message appears indicating whether the update was successful.

 Notes

You do not need to stop IAS on the destination computer to run the netsh
exec command. When the command is run, IAS is automatically refreshed with
the updated configuration settings.
 
This procedure will not work if the source and destination computer are
running different versions of Windows 2000.

This procedure replicates all IAS, remote access policy, registry, and
logging configuration.

-- 
James McIllece, Microsoft
Please do not send email directly to this alias.  This is my online account 
name for newsgroup participation only.
This posting is provided "AS IS" with no warranties, and confers no rights.


Relevant Pages

  • Re: Redundant IAS servers
    ... > additional IAS servers as RADIUS clients to my central IAS ... > server but that is not the redundancy I'm after. ... central IAS server configuration to a file, ...
    (microsoft.public.internet.radius)
  • Re: Moving IAS to new server
    ... > way to migrate it easily or do I need to simply install IAS on a new ... > Win2000 server and recreate each RAP manually. ... On the old server export the IAS configuration to a file using netsh ... Copy the file you created to the destination computer, and at a command ...
    (microsoft.public.internet.radius)
  • Re: SBS SP 1 installation error
    ... Component Name: Microsoft Exchange Forest Preparation ... Component Name: Server Configuration ... Component Name: Windows Server 2003 Configuration ... Component Name: Networking Configuration ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Misconfigured?
    ... The netgear has a setting for the Internet IP which is set to the ... DNS server address is set to SBS server's ip 192.168.5.109 ... but something else is clearly awry if you can't get DHCP ... Which, based on the configuration you gave, is part of the problem. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Misconfigured?
    ... The netgear has a setting for the Internet IP which is set to the ... DNS server address is set to SBS server's ip 192.168.5.109 ... DHCP working - and as Cliff says, that should be a simple thing. ... Which, based on the configuration you gave, is part of the problem. ...
    (microsoft.public.windows.server.sbs)