Sorry for my amfull english..

I have a trouble to configuring Freeradius and cisco for VPDN with MPPE encryption.. 
Cisco don't understand some radius attribute. This debug example

RADIUS: Received from id 21645/110 xxx.xx.xxx.xx:1812, Access-Accept, len
RADIUS:  6   6   00000002
RADIUS:  7   6   00000001
RADIUS:  8   6   FFFFFFFE
RADIUS:  26  40  000001370C222388F7FBDF2827945191CDCD7052A4D0035BC476929B
RADIUS:  26  12  00000137070600000002
RADIUS:  26  12  00000137080600000006
RADIUS:  authenticator 0B 80 F3 A7 EB 40 C1 E9 - 21 33 9C 18 1E C4 21 F9
RADIUS:  Service-Type        [6]   6   Framed                    [2]
RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
RADIUS:  Framed-IP-Address   [8]   6   255.255.255.254
RADIUS:  Vendor, Microsoft   [26]  40
RADIUS:   MS-CHAP-MPPE-Keys  [12]  34  *
RADIUS:  Vendor, Microsoft   [26]  12
RADIUS:   MS-MPPE-Enc-Policy [7]   6
RADIUS:   00 00 00                                         [???]
RADIUS:  Vendor, Microsoft   [26]  12
RADIUS:   MS-MPPE-Enc-Type   [8]   6
RADIUS:   00 00 00                                         [???]
RADIUS(0000037F): Received from id 21645/110
ppp660 PPP/AAA: Check Attr: service-type
ppp660 PPP/AAA: Check Attr: Framed-Protocol
ppp660 PPP/AAA: Check Attr: addr
ppp660 PPP/AAA: Check Attr: MS-CHAP-MPPE-Keys
ppp660 PPP: Phase is FORWARDING, Attempting Forward

I don't see MS-MPPE-Enc-Policy and MS-MPPE-Enc-Type... ;-((

If I configure to use MS-CHAPv2.. authentication is performed succesfully, but Cisco 
don't understand this attribute and MS-MPPE-Send-Key and MS-MPPE-Recv-Key

Can anybody help me ?

Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IK9O3S3-M), Version 12.2(13)T1,  RELEASE SOFTWARE (fc1)

Freeradius version 0.8.1

Thanks a lot..

-- 
Blinov A. Sergey, POST Ltd. system administrator
Phone: +7 8652 972729, +7 8793 467937  Email: [EMAIL PROTECTED] 
Origin: Ваша CISCO купила бы ... ПИВО !!!
Origin: Проблемы - двигатель прогресса
Information: BLNY-RIPN, BLNY-RIPE 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to