Re: (RADIATOR) Cisco 2511 - Not supplying allocated IP address toRadiator

1999-11-15 Thread Hugh Irvine


Hello Aaron and Brian -

On Mon, 15 Nov 1999, Aaron Holtz wrote:
 Yes, I believe that the radiator code looks for the Alive packet as well
 as a Start packet just for this case.  Be sure you are running a newer
 version of radiator - I believe that 2.13 and up should support it, but
 don't quote me on that.  
 

if ($status_type eq 'Start' || $status_type eq 'Alive')
{
# Some Ciscos dont send accounting-on, so we will
# detect a reboot with the first session (ID 0001)
$sessdb-clearNas($nas_id, $p)
if $session_id eq '0001';

# Ciscos sometimes sends Alive. Use them to make _sure_
# there is an entry in the database
$sessdb-add($original_username, $nas_id, $nas_port, $p);


Aaron is quite correct, here's the relevant code from Handler.pm (Radiator
2.14.1).

cheers

Hugh

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Cisco 2511 - Not supplying allocated IP address toRadiator

1999-11-15 Thread Brian Morris

I understand,  but I am still not getting them into my radonline database.

Could it be because I have "AccountingStopsOnly" for this realm??

Thanks for the feedback.

Brian

- Original Message -
From: Hugh Irvine [EMAIL PROTECTED]
To: Aaron Holtz [EMAIL PROTECTED]; Brian Morris [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, November 15, 1999 4:29 PM
Subject: Re: (RADIATOR) Cisco 2511 - Not supplying allocated IP address
toRadiator



 Hello Aaron and Brian -

 On Mon, 15 Nov 1999, Aaron Holtz wrote:
  Yes, I believe that the radiator code looks for the Alive packet as well
  as a Start packet just for this case.  Be sure you are running a newer
  version of radiator - I believe that 2.13 and up should support it, but
  don't quote me on that.
 

 if ($status_type eq 'Start' || $status_type eq 'Alive')
 {
 # Some Ciscos dont send accounting-on, so we will
 # detect a reboot with the first session (ID 0001)
 $sessdb-clearNas($nas_id, $p)
 if $session_id eq '0001';

 # Ciscos sometimes sends Alive. Use them to make _sure_
 # there is an entry in the database
 $sessdb-add($original_username, $nas_id, $nas_port, $p);


 Aaron is quite correct, here's the relevant code from Handler.pm (Radiator
 2.14.1).

 cheers

 Hugh

 --
 Radiator: the most portable, flexible and configurable RADIUS server
 anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
 Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
 NT, Rhapsody



===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Cisco 2511 - Not supplying allocated IP address toRadiator

1999-11-14 Thread Aaron Holtz

Brian,

Add:

aaa accounting update newinfo

You need 11.3 or higher if I'm not mistaken.  Cisco doesn't send the
Framed-IP-Address in the Start packet like some others do - however,
radiator will handle the Alive packet that the above command sends once
the user has authenticated PPP and has a Framed address.

--
Aaron Holtz
ComNet Inc.
UNIX Systems Administration/Network Operations
"It's not broken, it just lacks duct tape."
--

On Nov 15, Brian Morris molded the electrons to say

Hi All,

I have setup some Cisco 2511's to authenticate with Radiator and they are
all working fine, users can get on etc without any troubles at all.

However, the 2511 does not report the IP address it allocated to the user
into Radiator at all.  Other NAS's are working fine, so I suspect it is
something in the cisco 2511 config.

Has anyone else had this problem?  How would I fix it?

Config details follow...

Regards,  Brian Morris.


IOS 11.1.24

aaa new-model
aaa authentication login TELNET-USERS local
aaa authentication login no_radius enable
aaa authentication login consoleport none
aaa authentication ppp default if-needed radius
aaa authorization network radius
aaa accounting exec start-stop radius
aaa accounting network start-stop radius
aaa accounting connection start-stop radius
aaa accounting system start-stop radius





===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Cisco 2511 - Not supplying allocated IP address toRadiator

1999-11-14 Thread Brian Morris

Thanks Aaron,

Yes, the alive packet does have the IP address, but unless I am mistaken
this does not get inserted into RADONLINE  which is what I would really
like.

Is there a way around this?



- Original Message -
From: Aaron Holtz [EMAIL PROTECTED]
To: Brian Morris [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, November 15, 1999 1:31 PM
Subject: Re: (RADIATOR) Cisco 2511 - Not supplying allocated IP address
toRadiator


 Brian,

 Add:

 aaa accounting update newinfo

 You need 11.3 or higher if I'm not mistaken.  Cisco doesn't send the
 Framed-IP-Address in the Start packet like some others do - however,
 radiator will handle the Alive packet that the above command sends once
 the user has authenticated PPP and has a Framed address.

 --
 Aaron Holtz
 ComNet Inc.
 UNIX Systems Administration/Network Operations
 "It's not broken, it just lacks duct tape."
 --

 On Nov 15, Brian Morris molded the electrons to say

 Hi All,
 
 I have setup some Cisco 2511's to authenticate with Radiator and they are
 all working fine, users can get on etc without any troubles at all.
 
 However, the 2511 does not report the IP address it allocated to the user
 into Radiator at all.  Other NAS's are working fine, so I suspect it is
 something in the cisco 2511 config.
 
 Has anyone else had this problem?  How would I fix it?
 
 Config details follow...
 
 Regards,  Brian Morris.
 
 
 IOS 11.1.24
 
 aaa new-model
 aaa authentication login TELNET-USERS local
 aaa authentication login no_radius enable
 aaa authentication login consoleport none
 aaa authentication ppp default if-needed radius
 aaa authorization network radius
 aaa accounting exec start-stop radius
 aaa accounting network start-stop radius
 aaa accounting connection start-stop radius
 aaa accounting system start-stop radius
 
 
 
 
 
 ===
 Archive at http://www.thesite.com.au/~radiator/
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.
 


 ===
 Archive at http://www.thesite.com.au/~radiator/
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.