Hello Clark -
I will need to see your configuration file (no secrets) together with a trace 4
debug output showing what is going on.
>From what you have sent below, it looks like the device is sending startup
information via radius for logging purposes. On Ascends at least, this
behaviour is configurable and you can turn it off on the NAS. Otherwise, you
can set up a special Handler to deal with these records and log them if you
wish.
BTW - could you also let me know who the customer is for our records?
thanks
Hugh
On Mon, 24 Jul 2000, Clark Stacer wrote:
> Hello.
> I'm currently implementing a European ISP using Nortel CVX1800's and
> Radiator. I'm having some issues with authentication that I desperately
> need some help with.
>
> Problem:
> 1a. When I leave the CVX Vendor Attributes (Listed Below) out of the
> dictionary (Ascend dictionary) and use Ascend for NAS TYPE (Because I also
> have an Ascend TNT in our LA site), test users can login with ANY password
> as long as the username is valid.
> 1b. When I put the CVX vendor attributes into the dictionary and use the
> NortelCVX1800 NASType in radius.cfg, the userid is passed to radius as:
>
> Mon Jul 24 00:10:11 2000: INFO: Access rejected for $Id: Aptis.vinfo
> ImageName
> =fepmd Version=3.1 BuildNumber=2140 BuildDate=03/20/2000
> BuildTime=14:28:42
> Machine=BUILD03 User=Build TargetBoard=scc TargetProcessor=PPC603
> Branch=p3
> 11 Exp $: No such user
>
>
> Radius.cfg file snippet:
> <Client cvx.nas.ip.addr>
> NasType NortelCVX1800
> Secret secretpass
> DupInterval 0
> SNMPCommunity communityname
> DefaultRealm DEFAULT
> </Client>
>
> Nortel CVX 1800 Dictionary Entries I am using:
> # Here are some attributes that will allow us to work with
> # Nortel CVX 1800
> #VENDORATTR 2637 User-Name 1 string
> #VENDORATTR 2637 Filter-Id 11 string
> #VENDORATTR 2637 Login-IP-Host 14 ipaddr
> #VENDORATTR 2637 Login-Service 15 integer
> #VENDORATTR 2637 Login-TCP-Port 16 integer
> #VENDORATTR 2637 Old-Password 17 string
> #VENDORATTR 2637 Reply-Message 18 string
> #VENDORATTR 2637 Callback-Number 19 string
> #VENDORATTR 2637 Callback-Id 20 string
> #VENDORATTR 2637 Framed-Route 22 string
>
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
