Linux

Ask something
Discussion Locked

I have some problem with CISCO+RADIUS

0 helpful
4 replies

by xcbvbv

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have some problem with CISCO+RADIUS user identification. CISCO 3600 is used for dial-up accessing to INTERNET. User's account is checked with RADIUS Server. There is no problem, when user types his login and password in terminal window (win9x,NT) or uses script, but when term. window or script are not used in general and user types some words (even not correct login&password) only in windows's "connect to dial-up" password window, identification system does not operate correctly, and user canget access to protected resources. How can I fix this problem.
Beforehand, thanks.

4 replies

by bag

The only solution I have is to use a Ras Script. So write a nice how-to document/email and include the script. This is what I have done and all my problems are now thing of the past. Use the example included with windows and set it up so terminal windows wont pop-up so it will be transparent to the user. tey will enter their data in the gui part of RAS and the script will send the info properly. If you need more help write me personally. I will help you.

BAG

by xcbvbv

Regrettably, problem is conclude exactly in that some users know about free access without using RAS scripts and I can not order them to use script certainly (they will prefer to use free Internet:-)).

by maxwell edison

See this link:

http://www.vircom.com/services/howto/howtovoprad_007.htm

(REMOVE SPACES from the pasted URL.)

A Radius Profile is a group of attributes that are included in the Access Granted packet after the user has been Authenticated.

Here are certain rules to follow regarding the Profiles definitions. This is relevant only if you are using the Local Authentication module.A Radius Profile is a group of attributes that are included in the Access Granted packet after the user has been Authenticated.

Here are certain rules to follow regarding the Profiles definitions. This is relevant only if you are using the Local Authentication module.

If you wish to prevent access, you must include a '!' character in front of the addresses. Make sure these addresses appears between QUOTES.

Ex. Granting access only to NAS 1.1.1.1
NAS-IP-Address = "1.1.1.1"

Preventing access to NAS 1.1.1.1, 2.2.2.2 and 3.3.3.3

NAS-IP-Address = "!1.1.1.1, 2.2.2.2, 3.3.3.3"

Good luck,
Maxwell

This discussion is closed to new replies.