Ok, thank you about answer!!
Please, I have a yet a question: every time when I try to login from same username with same password, successfully login user which is first meet in a users file.

How can I delineate this users over Service-Type which include a aaa packet???
   - from cisco console (NAS-Prompt-User)
   -from dialup (Framed-User)


file "hint"
DEFAULT Suffix == ".ppp", Strip-User-Name = Yes
                   Hint = "HNT",
                   Service-Type = Framed-User,
                   Framed-Protocol = PPP

file "users"

usr100            User-Password := "pass"
               Service-Type = NAS-Prompt-User,
               cisco-avpair = "shell:priv-lvl=0"

usr100            Auth-Type := Local, User-Password := "pass"
               Called-Station-Id == "1133",
               Service-Type = Framed-User,
               Framed-Protocol = PPP,
               Cisco-AVPair ="ip:addr-pool=dynpool"
DEFAULT         Framed-Protocol == PPP
               Framed-Protocol = PPP,
               Framed-Compression = Van-Jacobson-TCP-IP


DEFAULT         Auth-Type := Reject
               Reply-Message = "%{User-Name},  don't have access!"

$ echo "User-Name=usr100,User-Password=pass,Service-Type=NAS-Prompt-User" | radclient 127.0.0.1:1812 auth testing123
Received response ID 244, code 2, length = 50
       Service-Type = NAS-Prompt-User
       Cisco-AVPair = "shell:priv-lvl=0"

$ echo "User-Name=usr100,User-Password=pass,Service-Type=Framed-User" | radclient 127.0.0.1:1812 auth testing123
Received response ID 244, code 2, length = 50
       Service-Type = NAS-Prompt-User
       Cisco-AVPair = "shell:priv-lvl=0"
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to