7600 -Pppoe service ,hardware requirements

Hi all I want to implement the pppoe service at one cisco 7600 -sup720bxl-SIp600-Spa5gbe ,but no success. I have searching at the cisco web to see if is possible with SIp 600 but not found .I am not sure that the SIP 600 is OK. The router has one another SIP400 but the SPA-5X1GE is not

Re: radius + dhcp

marco perugini wrote: hi alan, first of all thanks for your feedback! now i'm going to explain better: i'm in WiMax context with freeradius 2.1.1 and i want to differentiate several clients to assign addresses according with realm; here's an example: i've clie...@realm1, clie...@realm1 and

Re: Expired unix system passwords

James Smallacombe wrote: Thanks for your response...I had discarded the notion of using pam for this because of this warning in the radiusd.conf: That's historical. The libraries may have been fixed since then. The module appears enabled in raddb/radiusd.conf and I did put the recommended

Problem sanitising usernames in accounting

I'm seeing a problem with stripping usernames during accounting. Accounting is done on a separate physical server from the authentication (which works fine). Most of our users don't include a domain so their accounting works normally. Some users do send the domain (UOB) and this breaks the

Re: Problem sanitising usernames in accounting

I'm seeing a problem with stripping usernames during accounting. Accounting is done on a separate physical server from the authentication (which works fine). Most of our users don't include a domain so their accounting works normally. Some users do send the domain (UOB) and this breaks the

Re: 7600 -Pppoe service ,hardware requirements

This is freeradius, not Cisco support list. Ivan Kalik Kalik Informatika ISP I want to implement the pppoe service at one cisco 7600 -sup720bxl-SIp600-Spa5gbe ,but no success. I have searching at the cisco web to see if is possible with SIp 600 but not found .I am not sure that the SIP 600

Re: Problem sanitising usernames in accounting

On 10/07/2009 10:44 AM, Ivan Kalik wrote: I'm seeing a problem with stripping usernames during accounting. Accounting is done on a separate physical server from the authentication (which works fine). Most of our users don't include a domain so their accounting works normally. Some users do

double realm problem

Hello all, i do have a problem with our freeradius configuration and i have no idea how to solve it. we do have one realm configured domainname.com which works perfectly. every user who wants to authenticate with a different realm is proxied to an outside radius. server. the setup works fine.

Re: double realm problem

Hi, we do have one realm configured domainname.com http://domainname.com which works perfectly. every user who wants to authenticate with a different realm is proxied to an outside radius. server. the setup works fine. we do have some mobile devices who send something like:

Re: double realm problem

Hi, we do have one realm configured domainname.com which works perfectly. every user who wants to authenticate with a different realm is proxied to an outside radius. server. the setup works fine. we do have some mobile devices who send something like: usern...@company.com@wlan.mnc003.mc

Re: double realm problem

problem is, that we are a university, so they are our people. tousands of students and teachers. if we deny those users, our helpdesk will get more work. is there a way to remove the double entries or do i have to block those? -euroreg On Wed, Oct 7, 2009 at 1:50 PM, Alan Buxey

Re: double realm problem

Hi, problem is, that we are a university, so they are our people. tousands of students and teachers. if we deny those users, our helpdesk will get more work. is there a way to remove the double entries or do i have to block those? Any chance we are talking about eduroam? In this case: doing

Proxy/Realm problem in 2.1.7

Hi, Since upgrading FR to 2.1.7 from 2.1.3 and 2.1.1 on our 2 servers there's been an issue with our proxy pool. There are three servers in the auth and acct pools, but unless I comment two of them out (as below) I receive a 'Request Denied' message back in response to the first access-request

Re: double realm problem

hey, yes we are talking about eduroam and after reading your post, it seems like that it is the best to deny such users. thanks alot -euroreg On Wed, Oct 7, 2009 at 2:44 PM, Stefan Winter stefan.win...@restena.luwrote: Hi, problem is, that we are a university, so they are our people.

Re: Antw: Re: Attr-Rewrite and Users File

Dear Alan! Thanks for your answer, but now it seems to work... But it would be nice, if you can tell me, if there is a better way to do this... What I tried to do, was this: I´m getting some profile-Information from a NAS embedded in some crytical string in the attribute Acct-Session-Id. To

Re: Proxy/Realm problem in 2.1.7

Since upgrading FR to 2.1.7 from 2.1.3 and 2.1.1 on our 2 servers there's been an issue with our proxy pool. There are three servers in the auth and acct pools, but unless I comment two of them out (as below) I receive a 'Request Denied' message back in response to the first access-request

Re: double realm problem

where would be the best place to deny those users? we do not have alot of practice with freeradius, so any help would be appreciated, kind regards -euroreg On Wed, Oct 7, 2009 at 3:03 PM, mr typo euroregist...@gmail.com wrote: hey, yes we are talking about eduroam and after reading your

Weekly and daily logs

Sorry for the stupid question Is possible on FreeRADIUS Version 2.1.1 create log files both on daily and weekly basis? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - - List info/subscribe/unsubscribe? See

Re: Proxy/Realm problem in 2.1.7

hi, there does seem to be an issue with 2.1.7 - I've had a couple of reports stating that the proxy doesnt seem to 'stick' to one remote proxy during EAP (eg with client-balance or client-ip-balance methods). not sure what has changed since 2.1.6 - but a rollback to 2.1.6 with exactly the same

Re: Proxy/Realm problem in 2.1.7

Palmer J.D.F. j.d.f.pal...@swansea.ac.uk wrote: Since upgrading FR to 2.1.7 from 2.1.3 and 2.1.1 on our 2 servers there's been an issue with our proxy pool. There are three servers in the auth and acct pools, but unless I comment two of them out (as below) I receive a 'Request Denied'

Re: double realm problem

mr typo euroregist...@gmail.com wrote: i do have a problem with our freeradius configuration and i have no idea how to solve it. we do have one realm configured domainname.com which works perfectly. every user who wants to authenticate with a different realm is proxied to an outside

Re: Expired unix system passwords

On Wed, 7 Oct 2009, Alan DeKok wrote: James Smallacombe wrote: Thanks for your response...I had discarded the notion of using pam for this because of this warning in the radiusd.conf: That's historical. The libraries may have been fixed since then. Good to know...it might be worthwhile

Memory leak or misunderstanding - rlm_perl?

Hello, all. I am running freeradius-2.1.6 with all AAA logick hidden in perl module, thus using rlm_perl. Having about 1000-1 client connections per day radiusd consumes about 1Gb of memory per day (I restart it daily). The only (possibly) important thing - I am using several external

RE: Proxy/Realm problem in 2.1.7

hi, there does seem to be an issue with 2.1.7 - I've had a couple of reports stating that the proxy doesnt seem to 'stick' to one remote proxy during EAP (eg with client-balance or client-ip-balance methods). not sure what has changed since 2.1.6 - but a rollback to 2.1.6 with exactly the

Re: Proxy/Realm problem in 2.1.7

Palmer J.D.F. j.d.f.pal...@swansea.ac.uk wrote: there does seem to be an issue with 2.1.7 - I've had a couple of reports stating that the proxy doesnt seem to 'stick' to one remote proxy during EAP (eg with client-balance or client-ip-balance methods). not sure what has changed since 2.1.6 -

Re: Proxying accounting to create a 'tee'

On Tue, Aug 25, 2009 at 10:49:21AM +0100, Arran Cudbard-Bell wrote: I know it sounds a little clunky, but another option could be to use a chain of detail readers/writers? If you set the primary detail reader load factor to 100% the actual delay is likely to be pretty minimal... So you'd

Re: Proxying accounting to create a 'tee'

I settled on something similar to this. The outer server (processing requests from the NAS) uses redundant-load-balance to write round-robin across several (currently 5) detail files. Five detail listeners (one for each detail file) then feed data to their final destinations (remote

Re: Memory leak or misunderstanding - rlm_perl?

Mihail Vasiliev wrote: Hello, all. I am running freeradius-2.1.6 with all AAA logick hidden in perl module, thus using rlm_perl. Having about 1000-1 client connections per day radiusd consumes about 1Gb of memory per day (I restart it daily). The only (possibly) important thing - I

Re: Memory leak or misunderstanding - rlm_perl?

On Oct 7, 2009, at 8:58 PM, Mihail Vasiliev wrote: thread pool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 300 } Try run it with fixed pool size. This will reduce memory consumption. Best