Hello Lisa -

On Fri, 24 Nov 2000, Lisa Goulet wrote:
> Hi Hugh,
> 
> Here's a trace for the preauthentication.
> 
> If you'd like, here's a URL for Cisco's preauthentication doc(it's a short
> one).
> 
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121
> t/121t2/dtpreaut.htm#45657
> 
> Thanks a million,
> Lisa
> 
> 
> Fri Nov 24 09:50:17 2000: INFO: Server started: Radiator 2.16.3 on
> ns1.versatel.net
> Fri Nov 24 10:01:57 2000: DEBUG: Packet dump:
> *** Received from x.x.x.x port 1645 ....
> Code:       Access-Request
> Identifier: 28
> Authentic:  <31>8<203><178>T<253><203><10><207>0<237>)<240>H<238><154>
> Attributes:
>       NAS-IP-Address = x.x.x.x
>       Cisco-NAS-Port = "Serial1/1/11:0*"
>       NAS-Port-Type = ISDN
>       User-Name = "207500370"
>       Called-Station-Id = "207500370"
>       Calling-Station-Id = "207505640"
>       User-Password =
> "<209><168>;*<13><18><131><177>K]<191><156><175><166><198><31>"
>       Service-Type = Outbound-User
> 

As you can see from the trace above, the packet contains the Called-Station-Id
as the User-Name, and a Service-Type of Outbound-User. So you can set up a
Handler , usually with an AuthBy PORTLIMITCHECK, like this:

# configuration for Pre-Authentication

<Handler Service-Type = Outbound-User>
        <AuthBy PORTLIMITCHECK>
                .....
        </AuthBy>
</Handler>

.....

hth

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence. 


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to