Users without username (empty username) aren't able to connect to ARC. ARC doesn't send any authentication/accounting to radius. I was dialing from Windows 2000, I was always getting "Access denied ...", but ARC wasn't sending any authentication/accounting packet about this call. Syslog was clear too. Any ideas/suggestions? alex wrote:
So, what goes to radius if user doesnt enter anything (and I dont have username/password set for modem group)? What problems can cause "connection_type PPP_Only" for users with different OSes?
alex wrote:
Thanks. I think it's what I was looking for. Have to test it.
Do anybody use this ( set modem_group connection_type ppp_only) ? If yes, what is done with this (I have just read documentation in pdf, so please don't copy it here for me :-) )?
MPuras@solunet.com wrote:
gotcha. If you want to prevent users from making PPP negotiations without authentication then you need the following (from knowledgebase):
Set modems to connection type to normal. Use one of the following commands. hiper>>set modem_group all connection_type normal hiper>>set switched interface<slot:/mod:y>connection_type normal
I still dont think however that their is a way to reverse the way the protocol works. I think that the only thing that may help you is "perhaps" the "set modem_group all connection_type ppp_only". I have not used this parameter so I can not confirm whether this will work or not.
Thanks, Mario Puras SoluNet Technical Support Mailto: mpuras@solunet.com Direct: (321) 309-1410 888.449.5766 (USA) / 888.SOLUNET (Canada)
-----Original Message----- From: alex [mailto:alex@wanex.ge] Sent: Tuesday, May 13, 2003 10:17 AM To: Discussion relating to the 3Com/US Robotics Total Control modem systems. Subject: Re: [USR-TC] Authentication/PPP question
As I know with that configuration users that type null password in their dial-up connection are able to be connected to network, but with my current configuration it isn't possible. Once I tried "set modem_group all connection_type direct_net" but some users had some problems (with win9x). I don't want to fully disable authentication, because some users have to be authenticated.
MPuras@solunet.com wrote:
I dont think this is possible but it wont be the first time I have been incorrect. Maybe someone else knows of a way. Can I ask you why you are wanting to have it done this way?
Thanks, Mario Puras SoluNet Technical Support Mailto: mpuras@solunet.com Direct: (321) 309-1410 888.449.5766 (USA) / 888.SOLUNET (Canada)
-----Original Message----- From: alex [mailto:alex@wanex.ge] Sent: Tuesday, May 13, 2003 9:42 AM To: Discussion relating to the 3Com/US Robotics Total Control modem systems. Subject: Re: [USR-TC] Authentication/PPP question
I want to start PPP as soon as user is connected to the modem (see message: PPP starting ...) without any authentication, and then to authenticate users with PPP.
MPuras@solunet.com wrote:
Perhaps I am not following you but what you are describing is part of the LCP negotiations. Basically, when a PPP user dials up, the start by negotiating LCP, once LCP is negotiatied, they go through authentication
and
if authentication is successfull then they go through PPP negotiations
(IPCP
or IPNCP). If this is what you are seeing then this is normal.
Thanks, Mario Puras SoluNet Technical Support Mailto: mpuras@solunet.com Direct: (321) 309-1410 888.449.5766 (USA) / 888.SOLUNET (Canada)
-----Original Message----- From: alex [mailto:alex@wanex.ge] Sent: Tuesday, May 13, 2003 9:25 AM To: usr-tc Subject: [USR-TC] Authentication/PPP question
All users on my chassis are dialin PPP users (except manager - for telneting). I think that when those users are dialing in chassis first of all they authenticate to be granted access to this chassis and then authenticate for ppp. (Authenticate, start ppp, authenticate by ppp). I want to skeep first authentication and only authenticate by ppp. How can I do it?
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc