I have done this using free radius on solaris.

The documentation for compiling and configuring the daemon is pretty
good. For Cisco remember to set Service type = NAS-prompt-user.

For the pix, here are a few url's from Cisco to walk you thru setup.

http://www.cisco.com/warp/public/110/cvpn3k_pix_ias.html 

http://www.cisco.com/warp/public/110/atp52.html 

http://www.cisco.com/warp/public/110/pixcryaaa52.shtml 


For radius aaa on IOS (12.0 and up) 

aaa new-model
aaa authentication login default group radius
aaa authentication login localauth local
aaa authentication ppp default if-needed group radius
aaa authorization exec default group radius 
aaa authorization network default group radius
aaa accounting delay-start
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
aaa processes 6

radius-server host a.b.c.d auth-port 1645 acct-port 1646
radius-server retransmit 3
radius-server key xxxxxxxx


HTH

Glenn

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Tenorio, Leandro
Sent: Thursday, February 14, 2002 12:29 PM
To: '[EMAIL PROTECTED]'
Subject: Radius in PIX

Has anyone try to make a VPN (PPTP) using Radius auth? what radius
attributes expect? I'm trying to configure but in the radius server
saids that attribute expected in PIX is not defined.
�
Thanks to all

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to