Junos OS

 View Only
last person joined: 13 hours ago 

Ask questions and share experiences about Junos OS.

  • 1.  ERROR - Configuration download: Invalid realm?

    Posted 05-27-2023 14:47

    I'm trying to get the IPSec VPN working and when I connect via JSC I get this error:

    ERROR - Configuration download: Invalid realm

    It claims to be looking for realm "default." I can't find any hits in any documentation about this.

    Does anyone have any idea what could be causing this?

    Here's what is in the logs:

    May 27 18:01:36  xxxxxxxxxxx httpd-gk: REMOTE_ACCESS_VPN_AUTH_FAIL: Authentication failed for user xxxxx/ from xxxxxxx with user-application xxxxxxxxx, hostname ALAN, deviceid 302110d547610efeb605ad300ad983ded61ddf4723962782c619b150748189da, operatingsystem xxxxxxxxxx, domain null, workgroup WORKGROUP due to invalid realm


    ------------------------------
    JOHN SINGLETON
    ------------------------------


  • 2.  RE: ERROR - Configuration download: Invalid realm?

    Posted 07-06-2023 08:39

    Hi all,

    Does anyone managed to fix it, I'm having the same issue.



    ------------------------------
    RODRIGO BONHIN
    ------------------------------

    Original Message


  • 3.  RE: ERROR - Configuration download: Invalid realm?

    Posted 07-15-2024 16:01

    What was the fix for this error?



    ------------------------------
    SERVICE OPERATIONS SUPPORT
    ------------------------------

    Original Message


  • 4.  RE: ERROR - Configuration download: Invalid realm?

    Posted 07-16-2024 10:47

    We have had this issue as well and discovered through testing that the "Realm" is Case Sensitive. Check to see what you have setup under:

    set security remote-access profile "Profile Name" ipsec-vpn "Realm Name"

    We discovered that if in JSC they had the connection address as: vpn.companyname.com/office, but the profile was built with a capital O, they would see this error. Once they updated the connection address to vpn.companyname.com/Office, it would connect. The first part didn't seem to matter if it was capitalized or not, but the Realm name after the / in the connection address does.



    ------------------------------
    DONALD SHARP
    ------------------------------

    Original Message