Hello Cesar,
I would check these items, just as a beginning:
- Are other similar certificates working, or all of them are failing
to authenticate?
- Have you established obligatory CRL check in the Contivity server
certificate, and if so, is the CRL accessible from the Contivity?
- Has the certificate been revoked in the CA?
- Is the server certificate in the Contivity enabled?
- Have you configured the <certificate DN - Contivity group> mapping?
Regards,
Rodrigo.
On 9/5/05, Cesar Farro Flores <cesar.farro@t-empresas.com.pe> wrote:
Hi List,
We have contivity vpn switch 1700 sw V05_00.136 and certificates from CA
Verisign, we have a problem in the process of authenticatication. We can
see in the log that before this error message, the contivity delivers an
IP Address to my user. Then the authentication failure. Does anybody know
why this error messages
appears in the log : "rejected or aborted connection attempt". We will
appreaciate your help.
####################################################################
08/31/2005 11:43:40 0 ISAKMP [02] ISAKMP SA established with
mail=jesus@x.com.pe, cn=jesus , ou=organizacion -
x, ou=terms of use at www.ace.es/rpa (c)01, ou=csc - class 2,
o=xxx.s.a.a. (200.x.x.83)
08/31/2005 11:43:40 0 ISAKMP [13] Error notification (Authentication
failure) received from mail=jesus@x.com.pe, cn=jesus,
ou=organizacion - x, ou=terms of use at www.ace.es/rpa (c)01,
ou=csc - class 2, o=xxx.s.a.a. (200.x.x.83)
08/31/2005 11:43:40 0 ISAKMP [13] mail=jesus@x.com.pe,
cn=jesus, ou=organizacion - x, ou=terms of use at
www.ace.es/rpa (c)01, ou=csc - class 2, o=xxx.s.a.a.
(200.x.x.83) rejected or aborted connection attempt
##################################################################
