You have to instert a record in the naslist file with the ip of your
NAS. That's what is missing and thats why the radius says that is an
unknown client....
Also you have to do the same with the file acct_users so you will have
accounting too.
mtcu> Guys,
mtcu> I cannot get my cisco 5300 to get authentication from the radius box. I
mtcu> would appreciate any help.
mtcu> Thanks
mtcu> Tariq
mtcu> Output from the radiusd -X gives:
mtcu> Listening on authentication *:1812
mtcu> Listening on accounting *:1813
mtcu> Ready to process requests.
mtcu> rad_recv: Access-Request packet from host
mtcu> 172.10.30.10:1645, id=110, length=59
mtcu> Ignoring request from unknown client 172.10.30.10:1645
mtcu> --- Walking the entire request list ---
mtcu> Config of the Cisco AS 5300 server(172.10.30.10)
mtcu> aaa new-model
mtcu> aaa authentication login localauth local
mtcu> aaa authentication login test group radius enable
mtcu> aaa authentication ppp default if-needed group radius local
mtcu> aaa processes 6
mtcu> radius-server host 172.10.10.10 auth-port 1812 acct-port 1813
mtcu> radius-server retransmit 3
mtcu> radius-server timeout 3
mtcu> radius-server key as5300
mtcu> Clients.conf
mtcu> Client 172.10.30.10 {
mtcu> secret = as5300
mtcu> shortname = test
mtcu> # # the following three fields are optional, but may be used by
mtcu> # # checkrad.pl for simultaneous usage checks
mtcu> nastype = cisco
mtcu> # login = !root
mtcu> # password = orange
mtcu> }
mtcu> radiusd.conf
mtcu> set port = 1812
mtcu> __________________________________________________________________
mtcu> Win 12 amazing weekend breaks, one every month for a year to Dublin, Milan,
mtcu> the Alps, Paris and beyond
mtcu> http://www.tiscali.co.uk/travel/competitions/brilliant_weekends.html
mtcu> -
mtcu> List info/subscribe/unsubscribe? See
mtcu> http://www.freeradius.org/list/users.html
best regards
Costas A. Christonis
Networking & Communications Centre
Gallos Campus - University of Crete
email: [EMAIL PROTECTED]
http://www.ucnet.uoc.gr/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
