On Feb 3, 2:06pm, G. Douglas Davidson wrote:
> Subject: Re: (usr-tc) Radius and VPN-Neighbor
> On Feb 3, 12:28pm, Brian wrote:
> > Subject: Re: (usr-tc) Radius and VPN-Neighbor
> >
> > What attribute id are you using. I have used:
> >
> > VENDORATTR 429 USR-VPN-Neighbor 36872 ipaddr
> >
> > successfully. It has to be one hop away to work however.
> >
>
> I have tried both of these attribute formats:
>
> ATTRIBUTE USR-PW_VPN_Neighbor 0x9008 ipaddr
> ATTRIBUTE USR-PW_VPN_Neighbor 36872 ipaddr
>
I believe that I have the attribute successfully transmitted to the TC. The
format that worked for me was:
ATTRIBUTE USR-PW-VPN-Neighbor 36872 ipaddr USR
with the Radius users file set:
USR-PW-VPN-Neighbor = 198.144.34.46,
I end up with:
INFORMATION FOR SESSION me
Service Type: Framed
Framed Protocol: PPP
Speed of Connection: Auto
Login Service: Telnet
Interface Name: slot:9/mod:4
IEA Next Hop Gateway IP Address: 198.144.34.46
Active Session ID: 2031616
Framed IP Netmask: 0.0.0.0
Framed Routing: None
Framed Callback Identifier: 0
Framed MTU: 1441
Compression Algorithm: None
Compression Reset Mode: Auto
Receive Acc Map: 0
Transmit Acc Map: 0
I neglected to increment a length field in the section of Radius that returns
attributes to the client, and so I stomped on a few things.
BUT, it still is not working. I can ping the Next Hop Gateway. It is on the
same subnet at the ethernet IP on the TC. Some other settings:
IEA Radius Source Port Authentication ENABLED
IEA User Radius supplied username DISABLED
IP RIP ENABLED
IP Number RIP Interfaces: 1
IP Number RIP Neighbors: 0
IP RIP Flags: METRICS
SEND_REQUEST
IEA Next Hop Routing: ENABLED
IEA Send Unsolicited Proxy Arp: DISABLED
IEA Force Next Hop Route: DISABLED
Any thought would be appreciated.
--
-----
G Douglas Davidson | CityNet, Inc.
douglas(a)city-net.com | Pittsburgh, PA
voice: 412.481.5406 | fax: 412.431.1315
-
To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com"
with "unsubscribe usr-tc" in the body of the message.
For information on digests or retrieving files and old messages send
"help" to the same address. Do not use quotes in your message.