1720 IOS VPN with IAS Radius server 1

[geebs]

Hi all,

I have a strange problem, I got our VPN working so users can connect and authenticate with an IAS server and AD.

Works well, basically our laptop users take their laptops home, connect to the Internet, then fire up the Cisco client, it prompts them for their AD user/pass and bang there in, they can open outlook, map network drives, all works well.

One problem though is with users wanting to connect using their home PC's.
It seems that if they dont have a machine thats been on our work network, part of our domain, they can still connect, but not map drives.
They can actually map drives, but they get an access denied error ...

I don't understand where this is coming from, once they authenticate with the Radius server using their AD user/pass, they should have access to everything they normally have on the LAN.

Does anyone know what could be causing this ?

Have I missed something ?

 

[Frenchie2069]

The problem is that the workstation is not part of the domain.

Although the users have connected using RADIUS they have only authenticated with the Cisco, not the domain.

You need to establish an IPC connection to each server before the user can successfully map any drives. you can do this from a command prompt like this:

NET USE \\SERVER\IPC$ /USEROMAIN\USERNAME PASSWORD

If you have lots of servers you could look at a script that would make the connection. Something like this would ask the user for a username and password once and establish the IPC connection:

$ServerList='SERVER1','SERVER2','SERVER3'
$Domain='DOMAIN'

CLS
'Please enter your username for $Domain:'
GETS $Username
'Please enter your password for $Domain:'
GETS $Password

FOR EACH $Server in $ServerList
'Connecting to $Server - '
SHELL 'NET USE \\$Server\IPC$$ /USER:$UserName "$Password"'
IF @ERROR<>0
COLOR r+/n
'FAILED'
COLOR n/n
ELSE
COLOR g+/n
'OK'
COLOR n/n
ENDIF
?
NEXT

This script is written using KIX. You can run it using kix32 Script.KIX. You can find kix32 at

http://www.kixtart.org

Note that this script is something that I just knocked up in a cuople of minutes - it may need some debugging. Let me know and I will post any corrections here.

HTH,
Michael.

 

[geebs]

I thought this may have been the case.

Thanks for your script Frenchie, I will give it a shot today !