[cisco-nas] Radius and SENDAUTH

[Oliver Boehmer (oboehmer)]

Henk Blacquière <> wrote on Tuesday, May 31, 2005 11:07 AM:

> Hi all,
> 
> Having a question about 2-way ppp authentication using Radius:
> For my dial-in/dial-out DDR setup I want to do all the authentication
> on Radius. Sofar we have 
> been using locally configured usernames/passwords but this should be
> moved to ACS. 
> 
[...]
> 
> Does anybody have any idears on how to configure the ACS and/or NAS
> to also succesfully use the Radius method for SENDAUTH?
> 
> BTW I already tried the cisco av-pairs sendauth and send-secret. Not
> sure however if I used them correctly because I can not find any
> precise documentation on this exact situation. Wen using authen as
> the protocol (e.g. cisco-avpair=authen:send-secret=password) it does
> not pick it up on  my 3640 with IP plus vs. 12.2(19a).

Include Cisco-avpair = "lcp:send-secret=password" in your user's Radius profile to support outbound authentication.

	oli