hi, Thank you for the help,
The problem was in the authorization, because I was using aaa authorization network default if-authenticated group radius and when I delete the if-authenticated : aaa authorization network default group radius it works now fine, strange no, but now when a user dialin whith a terminal window , it says that ppp authorization failed. thank you Andrea for the help. Kali > At 13.55 14/10/02, you wrote: >>hi, >> >>I 'am using interface Group-Async , should I replace it by interface >> Dialer ? >> >>Is this what you mean? > > NO. Cisco IOS had a feature that creates virtual-interfaces based on > virtual-templates. Browse the documentation on Cisco's web site at > >http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdial_c/fnsprt8/index.htm. > You can setup session limit/timeout only if you use a > virtual-interface. > > Once you setup this, you don't need anymore group-async or dialer > interfaces. > > >> > you MUST use the virtual-interface feature of cisco IOS. you can >> setup timeouts only with virtual interface >> > >> > At 11.12 12/10/02, you wrote: >> >>hi, >> >> >> >>I am using freeradius 0.5, and sqlcounter module. >> >>I use the freeradius with a Patton and I got no problem auth, >> >> accounting, and disconnection. >> >> >> >>But when I try iy with the CISCO as5300(IOS 12.2), all the >> accounting >> >> and authentication works fine, but I got just one problem : >> >>the cisco can't disconnect the dialer if they reach there >> >> session-timeout? >> >> >> >>the cisco configuratiogn is: >> >> >> >>aaa new-model >> >>aaa authentication login default group radius >> >>aaa authentication ppp default if-needed group radius >> >>aaa authorization exec default if-authenticated group radius >> >>aaa authorization network default if-authenticated group radius aaa >> accounting delay-start >> >>aaa accounting exec default start-stop group radius >> >>aaa accounting network default start-stop group radius >> >>aaa processes 6 >> >> >> >> >> >>when I use the debug mode in cisco I got: >> >> >> >> User: ciscotesting, line tty 7, service Async >> >> Active time 00:03:12, Idle time 00:00:03 >> >> Timeouts: Absolute Idle Idle >> >> Session Exec >> >> Limits: - - 00:10:00 >> >> Disconnect in: - - - >> >> TTY: Line 7, running PPP on As7 >> >> Location: PPP: x.x.x.x >> >> DS0: (slot/unit/channel)=0/0/14 >> >> Line: Baud rate (TX/RX) is 115200/115200, no parity, 1 stopbits, >> 8 >> >> databits Status: Ready, Active, No Exit Banner, Async Interface >> Active >> >> HW PPP Support Active, Modem Detected >> >> Capabilities: Hardware Flowcontrol In, Hardware Flowcontrol Out >> >> Modem RI is CD, Line usable as async interface >> Modem Autoconfigure, Integrated Modem >> >> Modem State: Ready, Modem Configured >> >> >> >> User: ciscotest, line As7, service PPP >> >> Active time 00:03:02, Idle time 00:00:03 >> >> Timeouts: Absolute Idle >> >> Limits: - - >> >> Disconnect in: - - >> >> PPP: LCP Open, IPCP >> >> IP: Local x.x.x.x, remote x.x.x.x >> >> Counts: 226 packets input, 13485 bytes, 0 no buffer >> >> 0 input errors, 0 CRC, 0 frame, 0 overrun >> >> 207 packets output, 14700 bytes, 0 underruns >> >> 0 output errors, 0 collisions, 0 interface resets >> >> >> >> in the timeouts (limits and disconnect) I got no thing. >> >> >> >>is there any thing to change in the freeradius dictionary? >> >> >> >>thanks >> >> >> >> >> >> >> >>- >> >>List info/subscribe/unsubscribe? See >> >> http://www.freeradius.org/list/users.html >> > >> > >> > --------------------------------------- >> > Where's the ANY key? >> > --------------------------------------- >> > Ing. Andrea Gabellini >> > Email: [EMAIL PROTECTED] >> > Tel: 0549 886111 (Italy) >> > Tel. +378 0549 886111 (International) >> > >> > Intelcom San Marino S.p.A. >> > Strada degli Angariari, 3 >> > 47891 Rovereta >> > Repubblic of San Marino >> > >> > http://www.omniway.sm http://www.intelcom.sm >> > >> > >> > - >> > List info/subscribe/unsubscribe? See >> > http://www.freeradius.org/list/users.html >> >> >> >> >>- >>List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > > > --------------------------------------- > Education is the ability to listen to almost anything without losing > your temper. > --------------------------------------- > Ing. Andrea Gabellini > Email: [EMAIL PROTECTED] > Tel: 0549 886111 (Italy) > Tel. +378 0549 886111 (International) > > Intelcom San Marino S.p.A. > Strada degli Angariari, 3 > 47891 Rovereta > Repubblic of San Marino > > http://www.omniway.sm http://www.intelcom.sm > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
