freeradius and Cisco VPN IPSEC profiles authentication

Phil Mayers p.mayers at imperial.ac.uk
Thu Nov 4 11:55:49 CET 2010


On 04/11/10 10:41, Jevos, Peter wrote:
> DEFAULT Auth-Type := ntlm_auth_vpn, NAS-IP-Address == 10.1.1.252
> Tunnel-Type = "ESP",
> Tunnel-Private-Group-ID = "Group1",
> Tunnel-Password = "cisco",
> Cisco-Avpair="ipsec:dns-servers=10.1.1.6 10.1.1.7",
> Cisco-Avpair="ipsec:addr-pool=vpn_pool",

This wrong; you want:

Cisco-AVpair += "2nd:attribute"

This is documented in the manpage and docs.



More information about the Freeradius-Users mailing list