On Fri, 12 Jul 2002, Emre Bastuz wrote: > Hi, > > I´ve been trying to create a dialout profile with FreeRadius 0.5 and a Cisco > AS5300. The Dialout User profile looks like this: > > tester-out Password == "cisco", User-Service-Type == Outbound-User > Ascend-Send-Auth = Send-Auth-PAP, > Ascend-Dial-Number = "1234567", > Ascend-Send-Secret = "abc123", > Framed-IP-Address = 10.0.0.1, > Framed-IP-Netmask = 255.255.255.255
Here is the working profile we are using. Hope it helps: Framed-Compression = Van-Jacobson-TCP-IP Framed-MTU = 1500 Framed-IP-Netmask = 255.255.255.255 Framed-Protocol = PPP Cisco-AVPair = "outbound:send-secret=xxxxxxx" Service-Type = Outbound-User Cisco-AVPair = "outbound:addr*123.123.123.123" Cisco-AVPair = "outbound:dial-number=0486739672" > > The dialout succeeds physically but not on the authentication/authorization part > (I guess). The debug from the NAS looks like this: > > 1d01h: RADIUS: Received from id 203 192.168.1.1:1812, Access-Accept, len 87 > 1d01h: Attribute 26 12 00000211E7060000 > 1d01h: Attribute 26 19 00000211E30D3032 > 1d01h: Attribute 26 24 00000211D612657A > 1d01h: Attribute 8 6 D5A87D51 > 1d01h: Attribute 9 6 FFFFFFFF > 1d01h: RADIUS: saved authorization data for user 61420778 at 61262A64 > 1d01h: RADIUS: Bad attribute (unsupported or inapplicable attribute): type 8 len > 6 data 0xD5A87D51 > > When I remove the attributes "Framed-IP-Address" and "Framed-IP-Netmask" I don´t > get the "Bad Attribute" error from the NAS but I need to set the IP address of > the called peer somehow. > > Is "Framed-Address" not Valid with "User-Service-Type == Outbound-User" ? > > How can I set the peers´ IP Adress ? > > Is there also a way to specify which username the NAS should use to login to the > remote peer after dialing ? You set that in the Large Scale Dialout routes I think.See: http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120t/120t3/lsdial.htm > > How can specifiy the PAP password to be used when loging into the remote end > after callout ? > > I´ve been hitting my head on the wall over this for almost a day now, so any > help will be greatly appreciated :) > > Regards, > > Emre > > P.S.: the other direction, i.e. the remote end calling the NAS works fine. > > -- > Emre Bastuz > [EMAIL PROTECTED] http://www.emre.de > UIN: 561260 PGP Key ID: 0xAFAC77FD > > ------------------------------------------------- > This mail sent through IMP: http://horde.org/imp/ > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 10 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
