On Tue, 4 Feb 2003, Chris Parker wrote:
> At 05:02 PM 2/3/2003 -0800, Jim wrote:
> >
> >Questions:
> >
> >1. Are there any known issues with Ascend MaxTNTs? If so, what would be
> >the fix?
>
> First, I'd make sure you've read the 'doc/ascend' writeup. Basically,
> you *really* want to run your Ascends in VSA mode.
Yeah, read that. The network says they should be able to accept both on
their Ascends, but we're testing some more today. Also, a customer is
sending the old-style attributes. Can those be changed to VSA mode in the
radgroupcheck and/or radgroupreply or some other method? It sorta seems
that would be possible, but I can't see anywhere that it can be done.
> >2. Would adjusting any time settings in radiusd.conf help? (I don't see
> >how, but thought I'd ask...)
>
> It shouldn't. You mention that you are using several networks. I assume
> you are saying that you are using several wholesalers, so you may not
> have direct control over the NAS config. In that case, I'd suggest
> working with the provider that uses the TNT's to help troubleshoot the
> connection problems. Perhaps they are doing something on their radius
> server that isn't compatible with what you are returning.
That's exactly what we've been doing, which is why we know about the
disconnect reason and why we're all stymied.
> In all reality, if you are sending an Access-Accept, then there isn't
> much you can do, other than to confirm the A/V pairs you are sending
> will work with the NAS. Try starting with a basic profile and add
> A/V pairs until you find the problem.
Here's the test user profile (which is on a different box from the proxy)
we're using that works just fine with ICRadius, but never gets an IP
address assigned with freeradius:
DEFAULT Auth-Type = System,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Idle-Timeout = 900,
Session-Timeout = 4800,
Port-Limit = 6,
Framed-MTU = 1500
So, it's pretty basic. We are going to drop back to a very spare profile
and see if anything happens.
thanks,
Jim
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
