<html>
<head>
<meta content="text/html; charset=windows-1251"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Dear Alan!<br>
<br>
I am beginner in RADIUS. I guessed you talked about
"sites-available/default"<br>
because Cisco does not use any realms when sends its packets to the
RADIUS.<br>
<br>
I think it's needed "expanding of my task boundaries" :-) I want to
make Cisco<br>
devices authenticate users when ther enter the device via
telnet/ssh. It would<br>
be three-stage procedure:<br>
- Windows DC if IAS (Microsoft RADIUS) is accessible;<br>
- if no - RADIUS local DB if it is accessible;<br>
- if no - Cisco's local DB (NAS local authentication).<br>
<br>
So If I correctly understood I need to use "authenticate" section.<br>
<br>
But what is further I don't clearly imagine. I guess when
Access-Request is incoming,<br>
RADIUS in accordance with suggested scheme must change realm of
request and<br>
continue process packet with new conditions, is it right?<br>
<br>
I must define new realm, for example "ias", and I must define
home-server for it, <br>
do I?<br>
<br>
Kind regards,<br>
Ellad<br>
<br>
<br>
<br>
<br>
<blockquote cite="mid:4E8EE75A.4090603@deployingradius.com"
type="cite">
<small>authorize { ... ldap if (!notfound) { update control {
Proxy-To-Realm := "realm" } } ...
} And set up the realm with home server, etc.
</small>
<blockquote type="cite"><small>3) If "yes" - Access-Acept!
4) If "no" - Are any Proxies configured? FreeRADIUS ->
Proxy: User/Password
5) Proxy answers, FreeRADIUS translates the answer further to
NAS.
</small></blockquote>
<br>
</blockquote>
<br>
</body>
</html>