Problem: I want to setup Cisco 1721 + Microsoft IAS RADIUS/Active Directory for VPN access.
Solve: (cisco side example)
Router#show run Building configuration...
Current configuration : 1761 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption no service dhcp ! hostname Router ! boot system flash c1700-k9o3sy-mz.122-46a.bin aaa new-model aaa group server radius accessvpn server 193.13.10.111 auth-port 1812 acct-port 1813 server 193.13.10.110 auth-port 1812 acct-port 1813 ! aaa authentication login admins local aaa authentication ppp default group radius local aaa authentication ppp dialins group radius local aaa accounting network default start-stop group radius enable secret 5 removed ! username somebody password 0 removed no ip subnet-zero no ip domain-lookup ip name-server 193.14.59.9 ip name-server 193.14.59.20 ! ip audit notify log ip audit po max-events 100 ip cef vpdn enable ! vpdn-group ClearStreamVPN ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! ! ! ! ! interface FastEthernet0 ip address 192.168.11.105 255.255.255.0 secondary ip address 193.22.146.96 255.255.255.0 speed 100 full-duplex ! interface Virtual-Template1 ip unnumbered FastEthernet0 peer default ip address pool DIAL-IN ppp encrypt mppe auto ppp authentication ms-chap ! ip local pool DIAL-IN 193.22.146.102 193.22.146.104 ip local pool DIAL-IN 193.22.146.119 ip local pool DIAL-IN 193.22.146.121 no ip classless ip route 0.0.0.0 0.0.0.0 193.22.146.1 no ip http server ! radius-server host 193.13.10.111 auth-port 1812 acct-port 1813 key keyremoved radius-server host 193.13.10.110 auth-port 1812 acct-port 1813 key keyremoved ! line con 0 line aux 0 line vty 0 4 password removed line vty 5 15 password removed ! no scheduler allocate end
Router#
-------------------
In WinXP disable MS-CHAP2 and setup a static IP, for example:
193.22.146.119.