Junos OS

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about Junos OS.

  • 1.  ERROR - Configuration download: Invalid realm?

    Posted 05-27-2023 14:47

    I'm trying to get the IPSec VPN working and when I connect via JSC I get this error:

    ERROR - Configuration download: Invalid realm

    It claims to be looking for realm "default." I can't find any hits in any documentation about this.

    Does anyone have any idea what could be causing this?

    Here's what is in the logs:

    May 27 18:01:36  xxxxxxxxxxx httpd-gk: REMOTE_ACCESS_VPN_AUTH_FAIL: Authentication failed for user xxxxx/ from xxxxxxx with user-application xxxxxxxxx, hostname ALAN, deviceid 302110d547610efeb605ad300ad983ded61ddf4723962782c619b150748189da, operatingsystem xxxxxxxxxx, domain null, workgroup WORKGROUP due to invalid realm


    ------------------------------
    JOHN SINGLETON
    ------------------------------


  • 2.  RE: ERROR - Configuration download: Invalid realm?

    Posted 07-06-2023 08:39

    Hi all,

    Does anyone managed to fix it, I'm having the same issue.



    ------------------------------
    RODRIGO BONHIN
    ------------------------------

    Original Message


  • 3.  RE: ERROR - Configuration download: Invalid realm?

    Posted 11 days ago

    What was the fix for this error?



    ------------------------------
    SERVICE OPERATIONS SUPPORT
    ------------------------------

    Original Message


  • 4.  RE: ERROR - Configuration download: Invalid realm?

    Posted 10 days ago

    We have had this issue as well and discovered through testing that the "Realm" is Case Sensitive. Check to see what you have setup under:

    set security remote-access profile "Profile Name" ipsec-vpn "Realm Name"

    We discovered that if in JSC they had the connection address as: vpn.companyname.com/office, but the profile was built with a capital O, they would see this error. Once they updated the connection address to vpn.companyname.com/Office, it would connect. The first part didn't seem to matter if it was capitalized or not, but the Realm name after the / in the connection address does.



    ------------------------------
    DONALD SHARP
    ------------------------------

    Original Message