[nsp] CISCO 3600 + RADIUS
Rafa Marín López
rafa at dif.um.es
Mon Mar 24 10:58:56 EST 2003
Hello all.
I can't solve my problem yet. Could someone help me?
Thank you very much...
Rafa Marín López escribió:
> Hello Chris
>
> Chris Parker escribió:
>
>> At 02:56 PM 3/21/2003 +0100, Rafa Marín López wrote:
>>
>>> Hello all.
>>>
>>> Has someone configured a CISCO 3600 in order to send router
>>> advertisement through a virtual-access cloned from virtual-template
>>> through a RADIUS server?
>>>
>>> You will see , my radius server is freeradius and I have an user as
>>> it is following written :
>>>
>>> rafa Auth-Type := Local, User-Password == "wilma"
>>> Service-Type = Framed-User,
>>> Framed-Protocol = PPP,
>>> Framed-MTU = 1480,
>>> cisco-avpair = "ipv6:prefix=3ffe:ffff:1::/64 onlink autoconfig",
>>> cisco-avpair = "ipv6:route#1=3ffe:ffff:1::/64"
>>
>>
>>
>> You should make sure that you are getting both VS attributes back from
>> the FreeRADIUS server.
>
>
> The respose obtained in CISCO router is :
> authenticator A7 C7 C5 05 CC C7 21 6A - 11 3A 1B D2 35 55 8F CE
> 22:52:48: RADIUS: Framed-Protocol [7] 6
> PPP [1]
> 22:52:48: RADIUS: User-Name [1] 13 "rafa at umu.es"
> 22:52:48: RADIUS: CHAP-Password [3] 19 *
> 22:52:48: RADIUS: NAS-Port-Type [61] 6
> Virtual [5]
> 22:52:48: RADIUS: NAS-Port [5] 6
> 0 22:52:48: RADIUS: Service-Type [6]
> 6 Framed [2]
> 22:52:48: RADIUS: NAS-IP-Address [4] 6
> 155.54.95.1 22:52:48: RADIUS: Received from id 21645/25
> 155.54.95.11:1812, Access-Accept, len 100
> 22:52:48: RADIUS: authenticator DD BA 41 F2 6C B3 E9 BB - A8 1E FD F9
> 15 80 72 AF
> 22:52:48: RADIUS: Service-Type [6] 6
> Framed [2]
> 22:52:48: RADIUS: Framed-Protocol [7] 6
> PPP [1]
> 22:52:48: RADIUS: Framed-MTU [12] 6
> 1480 22:52:48: RADIUS: Vendor, Cisco [26]
> 62 22:52:48: RADIUS: Cisco AVpair [1] 56
> "ipv6:prefix#3+=2001:800:40:2C61::/64 onlink autoconfig"
> 22:52:48: RADIUS(0000001B): Received from id 21645/25
> 22:52:49: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
> 22:52:50: %LINEPROTO-5-UPDOWN: Line protocol on Interface
> Virtual-Access3, changed state to up
>
> However , it does not send the prefix in router advertisement... :(
>
>
>
>
>
>>
>>
>> For multiple attributes to be sent you should used the '+=' operator
>> instead of the '=' operator for your cisco-avpair reply-items.
>>
>> As for the cisco side, not sure what else to suggest.
>>
>> -Chris
>>
>> --
>> \\\|||/// \ StarNet Inc. \ Chris Parker
>> \ ~ ~ / \ WX *is* Wireless! \ Director, Engineering
>> | @ @ | \ http://www.starnetwx.net \ (847) 963-0116
>> oOo---(_)---oOo--\------------------------------------------------------
>> \ Wholesale Internet Services - http://www.megapop.net
>>
>>
>> _______________________________________________
>> cisco-nsp mailing list cisco-nsp at puck.nether.net
>> http://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>>
>
--
------------------------------------------------------
Rafael Marin Lopez
Faculty of Computer Science-University of Murcia
30071 Murcia - Spain
Telf: +34968364644 e-mail: rafa at dif.um.es
------------------------------------------------------
More information about the cisco-nsp
mailing list