accepting login authentication from a cisco NAS

2003-11-26 Thread Jason\(Website\)
Title: Message Hi all. I'am using a NAS - cisco 4500 router and trying to get it to use my freeradius installation on my RH8.0 box. Now i think i have the hosts file configured correctly Defines a RADIUS client. The format is 'client [hostname|ip-address]'## '127.0.0.1' is another name

VSA send back by radius-server to CISCO NAS

2003-07-25 Thread Guillermo Delmastro
Hi!!! Is there any way that freeradius send back VSA atributtes? Basically I need that freeradius send the VSA h323-return-code atributte. I am using freeradius-0.7, and I see that it does not send this VSA back. I use the users file for users. Thanks Guillermo

Re: Cisco-Nas-Port attribute

2003-07-21 Thread Andrea Gabellini
     I am new to freeradius server system. I got it running up only for five or six days and everthing seems fine except cisco-nas-port. I got weird values in the database for cisco nas port it is Serial3/0=2A but I expect it in Serial3/0:## format. What can be wrong any ideas guys. Please

RE: Cisco-Nas-Port attribute

2003-07-21 Thread Oleg Ustinov
=Unknown pre-bytes-in=0 pr... === finished We use CISCO AS5350. To all, can we fix it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Andrea Gabellini Sent: Monday, July 21, 2003 2:11 PM To: [EMAIL PROTECTED] Subject: Re: Cisco-Nas-Port attribute Hi

RE: Cisco-Nas-Port attribute

2003-07-21 Thread Paul Hampson
From: Andrea Gabellini Sent: Monday, 21 July 2003 10:11 PM some characters are black listed and replaced with the hex code. You can find this list in the file src/modules/rlm_sql/rlm_sql.c in the function sql_escape_func. Remove ':' from this list and you can see the correct value. You've

Cisco-Nas-Port attribute

2003-07-20 Thread Kursad Kayaturk
Hi Everybody, I am new to freeradius server system. I got it running up only for five or six days and everthing seems fine except cisco-nas-port. I got weird values in the database for cisco nas port it is Serial3/0=2A but I expect it in Serial3/0:## format. What can be wrong any ideas

cisco-nas-port

2003-07-20 Thread Kursad Kayaturk
Hi Everybody, I am new to freeradius server system. I got it running up only for five or six days and everthing seems fine except cisco-nas-port. I got weird values in the database for cisco nas port it is Serial3/0=2A but I expect it in Serial3/0:## format. If I use no aaa nas port

Re: cisco-nas-port

2003-07-20 Thread Peter Nixon
On Sun July 20 2003 18:00, Kursad Kayaturk wrote: Hi Everybody, I am new to freeradius server system. I got it running up only for five or six days and everthing seems fine except cisco-nas-port. I got weird values in the database for cisco nas port it is Serial3/0=2A but I expect

PPTP MS-CHAP Authorization from a CISCO NAS proxied to a Win2k IASradius server fails

2003-02-20 Thread Joe Maimon
Hello all, I am trying to authorize PPTP dialins with MS-CHAP or MS-CHAPv2 from a Cisco nas. I do this by proxying the request to the Radius service that comes with windows2000. Structure: [Win2k PPTP Client] | [Cisco IOS 12.2.13T] | [FreeRadius 8.0] | [Win2k IAS

Cisco NAS

2002-10-28 Thread Collin Smith
I am trying to get a Cisco VPN NAS Device to authenticate from freeradius and I am getting a reject back no matter what I have tried using known good username/passwords. Our radius server uses LDAP for auth. I have so far found that it apears that the Cisco VPN box is communicating with radius

Re: Cisco NAS

2002-10-28 Thread Alan DeKok
Collin Smith [EMAIL PROTECTED] wrote: I am trying to get a Cisco VPN NAS Device to authenticate from freeradius and I am getting a reject back no matter what I have tried using known good username/passwords. The debug log should tell you WHY it's rejecting. ... Dial up has no troubles

Re: Cisco NAS

2002-10-28 Thread Collin Smith
Sorry, I should have been more clear. The error I listed was what was recieved back on the VPN box. Actually I looked at the log for freeradius and I recieved the following which was strange since it is indicating the hostname of the VPN box instead of the LDAP username. Wed Oct 23 12:52:24

Re: Cisco NAS

2002-10-28 Thread Alan DeKok
Collin Smith [EMAIL PROTECTED] wrote: Sorry, I should have been more clear. The error I listed was what was recieved back on the VPN box. OK... Actually I looked at the log for freeradius and I recieved the following which was strange since it is indicating the hostname of the VPN box

Re: Cisco NAS: how to reject user?

2002-10-16 Thread Ruslan A Dautkhanov
Kostas Kalevras wrote: On Mon, 14 Oct 2002, Ruslan A Dautkhanov wrote: Hi, I have to reject an dial-in user, when some events occur. Can anybody know what SNMP OID should I use to administratively disconnect user (I think that Cisco may have a number of such OIDs - one for

Re: Cisco NAS: how to reject user?

2002-10-16 Thread Kostas Kalevras
On Wed, 16 Oct 2002, Ruslan A Dautkhanov wrote: Hi ! But I havn't found anywhere - How to kick PPPoE-users ? I have found http://www.vayner.net/Docs/Cisco/SNMP/MIBs/CISCO-PPPOE-MIB.my.txt , but it have no any variables, that can help to kick users. Don't know on that.

Re: Cisco NAS: how to reject user?

2002-10-14 Thread Kostas Kalevras
On Mon, 14 Oct 2002, Ruslan A Dautkhanov wrote: Hi, I have to reject an dial-in user, when some events occur. Can anybody know what SNMP OID should I use to administratively disconnect user (I think that Cisco may have a number of such OIDs - one for rejecting user by IP, one for

Re: Cisco NAS: how to reject user?

2002-10-14 Thread Alexander M. Pravking
On Mon, Oct 14, 2002 at 01:11:49PM +0800, Ruslan A Dautkhanov wrote: Hi, I have to reject an dial-in user, when some events occur. Can anybody know what SNMP OID should I use to administratively disconnect user (I think that Cisco may have a number of such OIDs - one for rejecting user by

Cisco NAS: how to reject user?

2002-10-13 Thread Ruslan A Dautkhanov
Hi, I have to reject an dial-in user, when some events occur. Can anybody know what SNMP OID should I use to administratively disconnect user (I think that Cisco may have a number of such OIDs - one for rejecting user by IP, one for SessionID, one another for rejecting user by name,

attributes 135,136 with cisco nas

2002-02-15 Thread Frank Ritchie
HI all, can someone forward me an example users files that sends attributes 135,136 to users connecting through a Cisco NAS? Thx Frank - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

cisco nas and Acct-Session-Id

2002-01-11 Thread Igor Chen
Hi! I got a problem with cisco NAS. Every time it reloads it also sets to null Acct-Session-Id counter. And acct_stop sql query matches several rows, if User-Name, NAS-IP-Address and Acct-Session-Id are the same. Is there any solution? Any unique attribute that is in both start and stop queries

Re: cisco nas and Acct-Session-Id

2002-01-11 Thread aland
Igor Chen [EMAIL PROTECTED] wrote: I got a problem with cisco NAS. Every time it reloads it also sets to null Acct-Session-Id counter. And acct_stop sql query matches several rows, if User-Name, NAS-IP-Address and Acct-Session-Id are the same. Is there any solution? Any unique attribute