How do I troubleshoot AuthAnvil Two Factor Auth with VPN in Microsoft’s RRAS?

If you get errors when attempting to log in to the VPN with AuthAnvil Two Factor Auth, you will need to revert your VPN configuration to the original working configuration, and do a step by step configuration, testing after each step, to isolate the issue.

1. Set the ‘Authentication Policy’ to ‘Windows Authentication’, reversing step 4 in the configuration guide.
2. Click the ‘Authentication Methods’ button and ensure that the authentication methods are the same as they were before,reversing step 5 in the configuration guide.
3. Restart RRAS using the instructions in step 8 in the configuration guide.
4. Reset the settings in the VPN client to pre-AuthAnvil settings and test the VPN connection. It should succeed. If it fails, there is an issue with the RRAS server or the VPN client. Troubleshoot RRAS based on the error given.
5. Use the AuthAnvil RADIUS Test Tool, as described in the ‘Verifying Functionality’ section of the AuthAnvil RADIUS Server Implementation Guide. It should succeed. If it fails, there is an issue with the AuthAnvil Two Factor Auth Server or RADIUS Server. Troubleshoot AuthAnvil Two Factor Auth based on the error given using the RADIUS server guide. (Don’t forget to set up a shared secret between the RADIUS server and the server that you are running the test on).
6. Switch the VPN Connection over to use Active Directory passwords and MS-CHAP v2 for authentication, using step 5 in the configuration guide. It should succeed. If it fails, there is an issue with the RRAS server or the VPN client. Troubleshoot RRAS based on the error given.
7. Switch the VPN connection to delegate authentication requests to the AuthAnvil RADIUS server, using step 4 in the configuration guide. It should succeed. If it fails, there is an issue with the AuthAnvil Two Factor Auth Server or RADIUS Server. Check the application event log for events from the AuthAnvil RADIUS server service to help you troubleshoot, and check the AuthAnvil Logs in AnvilManager to see if the request made it to the AuthAnvil Two Factor Auth server, and troubleshoot based on the log information.

Questions?

If you have any questions or need some help, we would be happy to assist. Open a case at help.scorpionsoft.com or send an email to support@scorpionsoft.com.