I've done the double checking but still the error persisted. I have no 
problem though in Auth-Type = Local only on the System authentication where I 
set in DEFAULT. Any other idea on this matter?

another concern is the multiple logins. when I set the Simultaneous-Use to 1 
it allow multiple connection more than 1. I tried setting it to 0 but no one 
can connect saying Error: Multiple Login.

If there is any more idea about this matter I'll be more than happy.

thanks

alben

On Wednesday 17 April 2002 10:58 am, neuroticimbecile wrote:
> On Monday 15 April 2002 13:44, you wrote:
> > Does anyone there encountered this error:
> >
> > Mon Apr 15 12:24:42 2002: Auth: Login incorrect: [mercator/<NO-PASSWORD>]
> > (from nas mac9.nyc.psi.com/S20101)
> >
> > I have this configure like this
> >
> > DEFAULT Auth-Type = System
> >         Service-Type = Framed-User,
> >         Framed-Protocol = PPP,
> >         Framed-IP-Address = 10.11.12.193+,
> >         Framed-IP-Netmask = 255.255.0.0
> >
> > When I do radtest it output like this which seems to be ok as its said on
> > the radius.log
>
> <snip>
>
> hi there sir alben,
>
> 1. i guess you already configured the 'shared secret' on both ends, the ras
> and the radius server, but it wouldn't hurt to double check.
>
> 2. item 5.10 of the faq (from http://www.radius.cistron.nl/faq/) says:
>
> =======<snip>=======
> If you set the Framed-IP-Netmask attribute in a radius profile, you
> are setting the netmask of the interface on the side of the NAS.
> The Framed-IP-Netmask attribute is NOT something you can set to
> influence the netmask on the side of the dialin user. And usually,
> that makes no sense anyway even if you could set it.
>
> The result of this on most NASes is that they start to route a
> subnet (the subnet that contains the assigned IP address and that
> is as big as the netmask indicates) to that PPP interface and thus
> to the user. If that is exactly what you want, then that's fine,
> but if you do not intend to route a whole subnet to the user,
> then by all means do NOT use the Framed-IP-Netmask attribute.
>
> Almost (all?) NASes interpret a left-out Framed-IP-Netmask as if
> it was set to 255.255.255.255. So if you somehow feel a certain
> need to set the Framed-IP-Netmask to anything, set it to
> 255.255.255.255.
> =======<snip>=======
>
> hth,
> -eric
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to