I have an IAS server running on Windows 2003. This server has been in production for 5 years, authenticating requests from a Netscreen 5GT firewall. Last week I replaced the 5GT with a new Juniper SSG20 firewall. I now cannot authenticate. I've worked with Juniper support and we've rebuilt the entire configuration and we continue to get access denied due to an incorrect username or password. I've pasted the parsed logs from a failed authentication attempt below. Can anyone see something in there that might be causing this problem?
Thanks,
Joe
NAS IP: 192.168.10.254
Client Username: administrator
Timestamp: 07/03/2014 14:05:29
Service: IAS
RADIUS Server: Server001
Acct-Session-ID: NS-0000000b
NAS-IP-Address: 192.168.1.254
NAS-Port: 11
NAS-Port-Type: Virtual (VPN)
Called-Station-ID: 70.110.119.250
Calling-Station-ID: 99.190.125.225
Vendor-Specific: 0x00000C980A0600000003
Client-IP-Address: 192.168.11.254
NAS-Manufacturer: 0
Client-Friendly-Name: Netscreen FW
Provider-Type: Windows
Proxy-Policy-Name: Use Windows authentication for all users
SAM-Account-Name: domain\administrator
Fully-Qualified-User-Name: domain\administrator
Authentication-Type: 1
Class: 311 1 192.168.1.251 07/03/2014 18:29:58 12
Packet-Type: Accept-Request
Reason-Code: Success
--------------------------------------------
NAS IP: 192.168.1.254
Client Username: administrator
Timestamp: 07/03/2014 14:05:29
Service: IAS
RADIUS Server: INFRATROL001
Class: 311 1 192.168.1.251 07/03/2014 18:29:58 12
Authentication-Type: 1
Fully-Qualified-User-Name: domain\administrator
SAM-Account-Name: domain\administrator
Proxy-Policy-Name: Use Windows authentication for all users
Provider-Type: Windows
Client-Friendly-Name: Netscreen FW
NAS-Manufacturer: 0
Client-IP-Address: 192.168.1.254
Packet-Type: Access-Reject
Reason-Code: Authentication failure
--------------------------------------------