Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re[2]: (ASCEND) Merit RADIUS and Shared Profiles

Made the appropriate changes and I am getting an authentication,
unfortunately I get an immediate disconnect with the following entry in
the accounting detail file.
Wed Jan 28 18:29:12 1998
        User-Name = "spch@crus"
        NAS-IP-Address = 206.136.64.244
        NAS-Port = 8
        NAS-Port-Type = Async
        Acct-Status-Type = Stop
        Acct-Delay-Time = 0
        Acct-Session-Id = "253915212"
        Acct-Authentic = RADIUS
        Acct-Session-Time = 11
        Acct-Input-Octets = 491
        Acct-Output-Octets = 578
        Acct-Input-Packets = 15
        Acct-Output-Packets = 13
        Ascend-Disconnect-Cause = Invalid-incoming-user
        Ascend-Connect-Progress = IPNCP-Opened
        Ascend-Data-Rate = 28800
        Ascend-PreSession-Time = 23
        Ascend-Pre-Input-Octets = 18
        Ascend-Pre-Output-Octets = 128
        Ascend-Pre-Input-Packets = 0
        Ascend-Pre-Output-Packets = 0
        Calling-Station-Id = "9738081066"
        Called-Station-Id = "2444430"
        Framed-Protocol = PPP
        Framed-IP-Address = 206.136.71.131
        
This is what I am getting in the radius.debug file.

unix_pass: ID = 'spch'
    User-Name = "spch@crus"
    NAS-IP-Address = 206.136.64.244
    NAS-Port = 5
    NAS-Port-Type = Async
    State = ""
    Ascend-Third-Prompt = ""
    Calling-Station-Id = "9738081066"
    Called-Station-Id = "2444430"
    Acct-Session-Id = "253915214"
    Service-Type = Framed
    NAS-Port-Type = Async
    Framed-Protocol = PPP
    Idle-Timeout = 900
    Ascend-Shared-Profile-Enable = Shared-Profile-Yes
    Session-Timeout = 28800
    Port-Limit = 1
    Filter-Id = "friday.crusoe.net"  

Any ideas?

On Wed, 28 Jan 1998 23:04:54 GMT
"Oliver J. Albrecht" <olli@spike.allcon.net> wrote:

> In article <19980126230352.AAA2157@palm> you wrote:
> 
> [...]
> >I added these to my Merit dictionary as a vendor specific attribute and
> >added it to the users RADIUS profile as follows.  
> [...]
> >        Ascend:Ascend-Shared-Profile-Enable = Shared-Profile-Yes,
> 
> There are a few things you might want to check:
> 
> 1. The entry in the radius users profile should probably be:
> 
> Ascend-Shared-Profile-Enable = Shared-Profile-Yes 
> (without the "Ascend:" prefix)
> 
> the dictionary entry (hope I got this one right :) ):
> Ascend.attr     Ascend-Shared-Profile-Enable    128     integer (*, 0)
> 
> 2. Start the merit radiusd in debugging mode (-x) and look at the 
> radius.debug file to see if it sends the correct reply to your max. 
> Here´s what I get when authentication runs on a profile containing 
> Ascend attributes:
> 
>     User-Name = "nexus"
>     User-Password = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
>     Service-Type = Outbound
>     NAS-IP-Address = 194.49.86.23
>     NAS-Port = 1
> get_radrequest: Request from c2315617 (spike.allcon.net[2020]) access, id =
> 98, len = 63
>     Service-Type = Framed
>     Framed-Protocol = PPP
>     Framed-IP-Address = 255.255.255.254
>     Framed-IP-Netmask = 255.255.255.255
>     Framed-Routing = None
>     Framed-Compression = None
>     Framed-MTU = 1006
>     Ascend-Shared-Profile-Enable = Shared-Profile-Yes
>     Ascend-Idle-Limit = 360
> send_reply: Authentication: 98/1 'nexus' from spike.allcon.net port 1
> Authenticate-Only
> 
> 3. For this to work, the merit radiusd must be compiled with support for
> the Ascend attributes *and* the NAS client type has to be declared in
> the clients file (type=Ascend:NAS).
> 
> Hope it helps...
> 
> -- 
> Oliver J. Albrecht <olli@allcon.net>
> 
> AllCon GmbH         Lise Meitner Str. 2        D-24941 Flensburg
> EMail: allcon@allcon.net     Tel: +49 461 9992-162     Fax: -165

------------------------------------------------------------------------------
Robert C. Tranter
Crusoe Communications, Inc.
973-882-1022
tranter@crusoe.net
www.crusoe.net
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: References: