IAS Server Event ID 3: Reason Code 5 - Remote Authentication Dial-In User Service

James McIllece [MS]

2009-06-08 23:25:52 UTC

Post by willing
Hi,Guys
i'm looking for some help with a issue with my IAS/firewall problem
i configured my firewall to use radius authentication.but when i
dialed via vpn,
i got the below logs.
Access request for user fwadmin was discarded
Fully-Qualified-User-Name = domain\fwadmin
NAS-IP-Address = 221.227.215.18
NAS-Identifier = LinkTrust
Called-Station-Identifier = <undetermined>
Calling-Station-Identifier = <undetermined>
Client-Friendly-Name = 172.18.3.4
Client-IP-Address = 172.18.3.4
NAS-Port-Type = <undetermined>
NAS-Port = <undetermined>
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Reason-Code = 3
Reason = Remote Authentication Dial-In User Service (RADIUS)
i would appreciate any suggestions!
Cheers,
willing,Fu

Hi there --

Reason code 3 means "The Remote Authentication Dial-In User Service
(RADIUS) Access-Request message that NPS received from the network access
server was malformed."

In other words, either your VPN server created a RADIUS message that does
not match the RADIUS standard or the message was somehow malformed in
transit from the VPN server to the IAS server.

If you consistently receive this error, try updating the VPN server
firmware if possible, and verify with them that their product is compliant
with the RADIUS standards.

James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.