At 08:43 AM 4/10/2002 -0700, Woolworth Mark-P23695 wrote: >I'm currently running freeradius 0.4 on Solaris 8 and everything is >working fine except the Tunnel-Password. My ISP is proxying the >authentication request to my radius server and my radius server is >authenticating the request and returning the tunnel attributes to allow >the NAS to build an L2TP tunnel. The ISP is claiming the Tunnel-Password >is coming back malformed. At the moment, I don't know which radius >server the ISP is running, they're supposed to let me know today. My >users file has been pared to the minimum > >gomer Auth-Type := Local, Password == "*****" > Service-Type = Framed-user, > Framed-Protocol = PPP, > Tunnel-Type:1 = L2TP, > Tunnel-Medium-Type:1 = IP, > Tunnel-Password:1 = password, > Tunnel-Server-Endpoint:1 = 127.0.0.1 > >The dictionary.tunnel file specifies encrypt=2 on the Tunnel-Password >attribute. >I've searched the archives and the only information I found on >Tunnel-Password was back in October 2001 when it was first >implemented. Does anyone have a scenario like this working? Are there >any known problems with password encryption interoperating with other >radius servers?
With other radius servers? I know that it is working at least with Funk SteelBelted Radius in terms of interoperability. FreeRADIUS also works with cisco and Ascend NAS that I've tested with ( in setting up L2TP via radius ). Sounds like your ISP has a problem, or has their implementation/configuration incorrect. -Chris -- \\\|||/// \ StarNet Inc. \ Chris Parker \ ~ ~ / \ WX *is* Wireless! \ Director, Engineering | @ @ | \ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\------------------------------------------------------ \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html