VPN - single interface - PIX - Win2k3

Hi,

I am trying to set up a VPN server on a Win2k3 server with a single
interface that sits behind a PIX firewall. We have a static NAT to the
server and TCP 1723 and the GRE protocol are open to it. When a client
connects, it gets a 691 (bad username or password) error. The security log
indicates a successful login with the account I'm using but the system log
shows thet the user has "connected and failed to authenticate" (20014
error). Any ideas?

Thanks.

I figured it out. The issue appears to be that I had not made the RRAS
server a member of the IAS and RAS servers group in AD. Thanks
"Matt O'Hara" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi,
>
> I am trying to set up a VPN server on a Win2k3 server with a single
> interface that sits behind a PIX firewall. We have a static NAT to the
> server and TCP 1723 and the GRE protocol are open to it. When a client
> connects, it gets a 691 (bad username or password) error. The security log
> indicates a successful login with the account I'm using but the system log
> shows thet the user has "connected and failed to authenticate" (20014
> error). Any ideas?
>
> Thanks.
>