Hello Khurram -
On Mon, 31 Jan 2000, Khurram Shahzad wrote:
> Hi All,
>
> First of all, I would like to show you the scenario.
> We are using Cisco NAS, with Radiator running on our Solaris servers for
> authentication/accounting. The Cisco NAS , sends requests to the first
> Radiator server, which on performing some Rewrite Rules authenticate
> users locally from MySQL database and forward the rest of requests to
> another Radiator server running in the same network. Up to this I am
> getting users authentication and all other required things smoothly.
>
> Now I want to configure the Network , so that users passed to second
> Radiator server (filtered by rewrite rules at 1st Radiator server), get
> IP addresses from another pool defined in the NAS or locally on that
> server.
>
> I have used "cisco-avpair="ip:addr_pool=my-own-pool", but after enabling
> authorization at Cisco NAS, as
> aaa authorization network radius
> it gives me Authorization Error Message.
>
There is a discussion on this very topic on the list at the moment.
First thing above is the spelling - I think it should be:
cisco-avpair="ip:addr-pool=my-own-pool
> Also I have used non-standard option with radius host command on Cisco
> NAS to enable , options
>
> Ascend-IP-Pool-Definition
> Ascend-Assign-IP-Pool
>
I suspect here that if you have turned on Ascend-compatibility, you should use
the corresponding Ascend reply attributes.
Again, I am not an expert on every version of NAS software, so I think you will
have to find out about this from Cisco.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
