Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

First ever VIA setup getting error show aaa authentication via auth-profile "A"" (len: 45), err: %

This thread has been viewed 13 times
  • 1.  First ever VIA setup getting error show aaa authentication via auth-profile "A"" (len: 45), err: %

    Posted 3 days ago

    I'm deploying my first VIA remote access and Mobily controller into a virtual environment
    so I can POC a customer migration.


    Mobility Controller Version 8.12.0.1  ( to match the customer )
    VIA Client 4.6.0.0 ( to match the customer )


    Closely following this guide.
    https://www.arubanetworks.com/techdocs/VIA/3x/content/via%20config/configuring_via_settings.htm
     

    configuring the Pre-Shared Key (PSK) done

    ( abc123 )

     

    Uploading Certificates for Certificate-Based Authentication 

    ( not done as not certbased auth )

     

    Enabling VPN Server Modules

    Done PEFV licence installed

     

    Creating VIA User Roles

    skipped will use

    default-via-role

     

    Creating VIA Authentication Profiles

    skipped uses
    Server Group "internal"

     

    Creating VIA Connection Profiles

    I'm unsure how the system will allocate IP addresses to the VPN clients using the default connection profile,
    Added a single network to tunnel in the
    VIA Connection default
    I think this might be a missing component

     

    Associating VIA Connection Profiles to User Roles

    Skipped will use defaults

     

    Configuring VIA Web Authentication Profiles

    Default added to the profile
    Change made

     

    Configuring VIA Client WLAN Profiles

    Skipped

     

    Configuring Additional VIA Options

    Skipped

     

    Rebranding VIA

    Skipped

     

    Uploading VIA Installers

    Skipped

     

    Download the VIA Installer

    Skipped

     

    setup a user

    under Authentication > Auth Server
    internal
    created a new user
    username: test

    password: password

    role is default-via-role

     

     

     


    Should this be enough for the client to work in the most basic lab setup ? my client is in the same subnet as the controller.


    when I try to connected

    on the client:

    client encountered an internal error.

    profile selection cancelled
     

     

     



    The logs on the mobility control do not give anything


    Any assistance appreciated thanks 

    Simon




  • 2.  RE: First ever VIA setup getting error show aaa authentication via auth-profile "A"" (len: 45), err: %

    Posted 3 days ago

    Subject line was incorrect as this was based on a earlier error I was seeing 




  • 3.  RE: First ever VIA setup getting error show aaa authentication via auth-profile "A"" (len: 45), err: %

    Posted 2 days ago

    made this change and it appears to be downloading a profile but cannot establish a connection 

     

     

     

     




  • 4.  RE: First ever VIA setup getting error show aaa authentication via auth-profile "A"" (len: 45), err: %

    Posted 2 days ago

    VIA not licenced dropping IKE request 





  • 5.  RE: First ever VIA setup getting error show aaa authentication via auth-profile "A"" (len: 45), err: %

    EMPLOYEE
    Posted 2 days ago

    So you found one possible explanation?

    Seems like there is a follow up here.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------