Re: IAS/RADIUS server has passed an invalid value

From the log files I can see the filters being passed from the IAS server to
the RRAS server. Let's see why it is not working
1) What are the filters that you have applied on the remote access policy?
2) How do you check if the filters are applied or not. i.e. how do you
decide that the traffic is blocked or not ..for eg. by doing a ping etc.

--
Janani Vasudevan [MSFT]
Software Design Engineer/Test
RRAS, Windows Enterprise Networking

http://blogs.msdn.com/jananiv

RRAS blog: http://blogs.technet.com/rrasblog

[This posting is provided "AS IS" with no warranties, and confers no
rights.]

"Frank Pusch" <FrankPusch@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7C5E4D4F-30C7-4543-821D-E192DC26ECF7@xxxxxxxxxxxxxxxx
Hi Janani,
the logfiles are now on the ftp site again.

The answer to your questions:
Yes, I checked the event logs. The right policy is active without RQS
filter.
But it doesnt work, I mean this has no effect.

Many thanks to review the log files.

Frank Pusch




.

Relevant Pages

  • Re: Internet Access but no firewall.
    ... When RRAS VPN server is configured using "Configuration wizard" then RRAS ... places filters on the public adapter to block all but few selected type of ... Click Configure Interface, click Input Filters ...
    (microsoft.public.win2000.ras_routing)
  • Re: Stop Updates when connected to RRAS
    ... after the computer has connected to the RRAS and has ... find it's own way to the internet or the WSUS server? ... when the remote computer is connected, it tries broadcasts for DHCP, ... RRAS filters are reasonably sophisticated. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Inbound filter for preventing access to certain ports except from local subnet
    ... You can certainly set up packet filters in RRAS. ... From the RRAS console, ... It is actually a public interface which is the only active interface. ...
    (microsoft.public.win2000.ras_routing)
  • Re: VPN users have unrestricted access
    ... filters would block them but does not fix the permissions problem. ... > You can acheive this by configuring filters in the remote access policy. ... >> new group that only has rights to one share. ...
    (microsoft.public.win2000.ras_routing)
  • Re: 2003 server vpn and 2000 router?
    ... It is all configured from the RRAS console, and it is not really all ... then configure rules to allow the traffic you want your server to send or ... In the Properties sheet select Input Filters or Output Filters. ... >>in the protocol number. ...
    (microsoft.public.windows.server.networking)