This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LDAP Auth problem over IPSec

Hi,

We have a problem randomly happening. Users are using to AD Auth for SSLVPN. And sometimes gives an error. When I was check the SSLVPN application; "auth error". After then was check the Sophos XG and gives a same error. If i do manually disconnect and connect IPsec from 2.site problem solves.

Notes;
Both site, 18 MR5 but problem has older versions.
I was try authentication service restart.
Problem during, Test Server connection gives an connection error.

Where should i check log?

This thread was automatically locked due to age.

Top Replies

FormerMember over 2 years ago in reply to wit128bdolar +1

Hi wit128bdolar , You need to check the logs at the site users are getting authenticated. Thanks,

0 FormerMember over 2 years ago

Hi wit128bdolar,

Thanks for reaching out to the Community!

Are you authenticating SSL VPN remote users on the AD server from site 1 over IPsec VPN? Did you configure the system IPsec route for system-generated?

If users are reporting authentication issues, I'd advise you to collect access_server logs in debugging.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 wit128bdolar over 2 years ago in reply to FormerMember

Thanks for your reply.

-Yes, users authenticated AD server on site 1 over site 2 IPSec.

-Nope. System using system generated route.

-Ok but which site? I guess your mention site 2, isn't it?
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 2 years ago in reply to wit128bdolar

Hi wit128bdolar,

You need to check the logs at the site users are getting authenticated.

Thanks,
Cancel
Vote Up +1 Vote Down

Cancel
0 SteveP over 2 years ago

If you’re saying that you want the xg125 to do ldap(s) to the AD server in site 1 the try add the following via the console

system ipsec_route add host <IP Address of ADhost in site 1> tunnelname <tunnel name in site 2 that connects to site 1>
Cancel
Vote Up +1 Vote Down

Cancel
0 wit128bdolar over 2 years ago in reply to SteveP

Nope, this built is working but randomly users cannot authenticate.
Cancel
Vote Up 0 Vote Down

Cancel