[nsp] PPPoE authentication CISCO 3600 + RADIUS server.
Ezequiel Carson
ezequiel at ifxnw.com.ar
Thu Mar 6 10:38:03 EST 2003
es extrano!.
a mi me paso que cuando norecibia ningun atributo no me autenticaba :(
Ezeq.
On Thu, 2003-03-06 at 10:33, Rafa Marín López wrote:
>
> Hello Ezqueil
>
> These are radius attributes
>
> rafa Auth-Type := Local, User-Password == "wilma"
> Service-Type = Framed-User,
> Framed-Protocol = PPP,
> cisco-avpair = "ipv6:prefix#1=2001:800:40:2c72::/64 autconfig",
> cisco-avpair = "ipv6:route#1=2001:800:40:2c72::/64"
>
>
> Ezequiel Carson escribió:
>
> >What attributes is your radius responding in the Access-Response?
> >
> >Have you tried adding Service-Type=Framed-Protocol etc..etc.
> >
> >Zk
> >
> >On Thu, 2003-03-06 at 07:11, Rafa Marín López wrote:
> >
> >
> >>Hello all.
> >>
> >>I have built a test that consists of :
> >>
> >>FreeBSD 4.7 <-----------> CISCO 3600 <---------->FreeRadius.
> >> pppoe
> >> ( ipv6cp)
> >>
> >>My problem is FreeRadius authenticates to client (FreeBSD) and it says
> >>OK but CISCO 3600 do not establish connection with FreeBSD 4.7 because
> >>of authentication failure :( . But I don't understand because
> >>FreeRADIUS send and Access-Accept to the router.
> >>
> >>My CISCO configuration is :
> >>
> >>aaa new-model
> >>!
> >>!
> >>aaa authentication login default none
> >>aaa authentication ppp default group radius
> >>aaa authorization network default group radius
> >>aaa session-id common
> >>.......
> >>
> >>interface Virtual-Template1
> >> no ip address
> >> ipv6 enable
> >> ipv6 mtu 1480
> >> no ipv6 nd suppress-ra
> >>
> A question ... should this next line be enabled?
>
> >>ppp authentication chap //IF THIS LINE IS DELETED AUTHENTICATION
> >>INFORMATION IS NOT SENT TO RADIUS SERVER :(
> >>!
> >>
> >>--
> >>------------------------------------------------------
> >>Rafael Marin Lopez
> >>Faculty of Computer Science-University of Murcia
> >>30071 Murcia - Spain
> >>Telf: +34968364644 e-mail: rafa at dif.um.es
> >>------------------------------------------------------
> >>
> >>
> >>_______________________________________________
> >>cisco-nsp mailing list cisco-nsp at puck.nether.net
> >>http://puck.nether.net/mailman/listinfo/cisco-nsp
> >>archive at http://puck.nether.net/pipermail/cisco-nsp/
> >>
> >>
> >>
> >
> >
> >
> >
> >
> >
>
> --
> ------------------------------------------------------
> Rafael Marin Lopez
> Faculty of Computer Science-University of Murcia
> 30071 Murcia - Spain
> Telf: +34968364644 e-mail: rafa at dif.um.es
> ------------------------------------------------------
>
>
>
>
More information about the cisco-nsp
mailing list