Hi there :)

I'm trying to setup FreeRADIUS to work with two times authorization with two
different hardware using the same login but two different passwords.

The first request is sent by some Network Access Server (NAS) using user's
login and some password like 'cisco' to get VPN information.

The second request is sent by some Provider Edge Router (PE LNS) to
authenticate user's login and password using the same RADIUS server.

It can be done easily using the 'users' file, but it doesn't seem to be
possible using rlm_sql!

Can anybody help me ?

Kind regards,
Bastien DOUCE.


-----

bdo     Huntgroup-Name == "NAS_DIAL", Auth-Type == "CHAP", Password ==
"cisco"
        Service-Type := Outbound,
        Cisco-AVPair += "ipsec:key-exchange=ike",
        Cisco-AVPair += "ipsec:group-lock=1",
        Cisco-AVPair += "ip:dns-servers=$ADR_DNS_P $ADR_DNS_S",
        Cisco-AVPair += "ipsec:tunnel-password=$PRESHARED_KEY",
        Cisco-AVPair += "ip:addr-pool=$NOM_POOL",
        Fall-Through = Yes

bdo     Huntgroup-Name == "PE_DIAL", Auth-Type == "CHAP", Password == "test"
        Cisco-AVPair += "$STRING_PUC",
        Fall-Through = Yes



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to