- Freeradius-Users - lists.freeradius.org

Re: Algum brasileiro nessa lista?
by INACIO ALVES 18 Nov '09

18 Nov '09

Olá aos brasileiros, Sou mais um que está aprendendo (e tendo problamas) o FreeRADIUS. Espero que possamos trocar experiências e configurarmos de modo que o mesmo atenda nossas necessidades. Atualmente estou no básico sobre o protocolo RADIUS e nos primeiros passos com os arquivos de configuração do FreeRADIUS. Até mais. Inácio Alves Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site

2 1

help--- IPsec VPN on radius
by Yagnesh Dave 18 Nov '09

18 Nov '09

Hi, I am trying to configure this on Free Radius; # setup for IPSec VPDN, ezvpn Password := "cisco" Service-Type = outbound, Cisco-Avpair = "ipsec:tunnel-password=cisco123", Cisco-Avpair="ipsec:tunnel-type*esp", Cisco-Avpair="ipsec:group-lock=1", Cisco-Avpair="ipsec:key-exchange=ike", Cisco-Avpair="ipsec:addr-pool=hw-pool", test@ezvpn Password := "test123" Cisco-Avpair="ipsec:tunnel-type*esp", Cisco-Avpair="ipsec:group-lock=1", Cisco-Avpair="ipsec:key-exchange=ike", Cisco-Avpair="ipsec:addr-pool=hw-pool", Now, When I run the freeRadius, I get this error in the log file /usr/local/etc/raddb/users[24374]: Parse error (reply) for entry ezvpn: Unknown value outbound for attribute Service-Type Errors reading /usr/local/etc/raddb/users Please tell what is the correct config to get it working. Regards, Dave.

1 0

Re: Freeradius-Users Digest, Vol 55, Issue 80
by Gilbert Lo 18 Nov '09

18 Nov '09

Thank you for your message. I am away until Nov 19th. I will respond to your message on my return . For urgent matters, please contact helpdesk(a)stgeorges.bc.ca . Cheers, Gilbert Lo

1 0

Accounting : Alvarion WiMax Base Station as NAS
by Sylvain De Muynck 18 Nov '09

18 Nov '09

Thanks for your prompt reply, I am trying to contact technical support team from Alvarion to get more documentations and support however it looks like it is not going to be easy regarding all your replies. Ah.. Alvarion as NAS..! By the way, for those who tried it, was the session time-out (authentication part) working ? Regards Sylvain Sylvain De Muynck Executive assistant to VAS/ISP and head of Operations Millicom Lao Co., Ltd. (Tigo Lao) 14 Lane Xang Avenue, PO Box 4693 Vientiane, Lao PDR Tigo: +856 207 800 563 Office: +856 207 800 700 Fax: +856 207 800 701 Email: sylvain.demuynck(a)tigolao.com -----Original Message----- From: freeradius-users-bounces+sylvain.demuynck=tigolao.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+sylvain.demuynck=tigolao.com@lists.freeradius.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Wednesday, November 18, 2009 4:49 AM To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 55, Issue 77 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Authenticating in a Debian lenny through freeradius (Wagner Pereira) 2. Re: Nas update with DynDNS (????????? ?????) 3. RE: SSID based authentication (Garber, Neal) 4. RE: Accounting : Alvarion WiMax Base Station as NAS (Ben Wiechman) 5. Re: Authenticate Many Sites on dynamic IPs through One Freeradius Server (Charles (KOL) Goma) 6. Re: Book About Free-Radius Configurations (INACIO ALVES) 7. Re: Book About Free-Radius Configurations (Marinko Tarlac) 8. adding eap-tls/peap/ttls support to freeradius problem (Tomas Pelka) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 Nov 2009 10:14:59 -0200 From: Wagner Pereira <wpereira(a)pop-sp.rnp.br> Subject: Authenticating in a Debian lenny through freeradius To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <4B0293C3.8030606(a)pop-sp.rnp.br> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Hi, What should I edit in a Debian lenny aiming to authenticate my user in another server running freeradius (via PAP method, according to Alan Dekok in http://deployingradius.com) Thanks. -- Wagner Pereira PoP-SP/RNP - Ponto de Presen?a da RNP em S?o Paulo CCE/USP - Centro de Computa??o Eletr?nica da Universidade de S?o Paulo http://www.pop-sp.rnp.br (11) 3091-8902 ------------------------------ Message: 2 Date: Tue, 17 Nov 2009 15:42:41 +0300 From: ????????? ????? <avkosykh(a)gmail.com> Subject: Re: Nas update with DynDNS To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <879ce10d0911170442n660b450u5b45628ba274526e(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" hi. try to use sites-available/dynamic-clients. i'm use this fearture, add new client to mysql table and don't need to restart radius. ? ?????????, ????? ????????? 2009/11/17 Fahd Kasri <fahd.kasri(a)weblib.eu> > To avoid restarting radiusd everytime the Nas table is updated, I want to > use something similar to DynDNS. Does radiusd cache the domain's IP address > at startup or does it resolve the domain name every time? > > -- > Fahd > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

2 1

Accounting : Alvarion WiMax Base Station as NAS
by Sylvain De Muynck 17 Nov '09

17 Nov '09

Dear All, As everyone already tried to use BreeMax Alvarion BTS as NAS for the freeradius ? I got trouble for the accounting part of it : * Cannot see upload/download (acct-input/output-octets) * Total time is always equal to 0 * No interim updates (even if Acct-Interim-Updates configured) It seems like I should configure this on my NAS however I do not know how could I do it. Thanks in advance for your advises, Let me know if you need for details regarding my architecture, Regards Sylvain

3 2

SSID based authentication
by Peter Carlstedt 17 Nov '09

17 Nov '09

Hello everyone. As you know by now I am the one asking alot of questions but if you dont ask you dont learn;) Well I have been searching the net for an answer but have not found any. I described in my lastest question how to get SSID authentication to work but I missed on important thing. If I want an enduser to be able to connect to the same SSID on multiple AP´s then I can not use "Called-Station-ID" since it also includes information about the mac address for a specific AP. So how do I do to be able to authenticate by just using the SSID and not the mac address for a specific AP? Im using mikrotik and it do not have dynamic VLAN so I will have to bind a VLAN per SSID. Best regards/ Peter Carlstedt _________________________________________________________________ Windows Live: Keep your friends up to date with what you do online. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/so…

2 1

Nas update with DynDNS
by Fahd Kasri 17 Nov '09

17 Nov '09

To avoid restarting radiusd everytime the Nas table is updated, I want to use something similar to DynDNS. Does radiusd cache the domain's IP address at startup or does it resolve the domain name every time? -- Fahd

2 1

Authenticating in a Debian lenny through freeradius
by Wagner Pereira 17 Nov '09

17 Nov '09

Hi, What should I edit in a Debian lenny aiming to authenticate my user in another server running freeradius (via PAP method, according to Alan Dekok in http://deployingradius.com) Thanks. -- Wagner Pereira PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br (11) 3091-8902

1 0

COA Examples
by Andrew Paternoster 17 Nov '09

17 Nov '09

HI Does anyone have any COA policy examples? I want to use them on a cisco router to change the traffic shaping policy at different times of the day. Thank you Andrew Paternoster Senior System Engineer [cid:logo35.jpg]<http://www.gpk.net.au/> [cid:spacer7cf.jpg] <http://www.gpk.net.au> 2/94 Abbott Road, Hallam, VIC 3083 Phone: 1300 854 223 Fax: 1300 854 228 www.gpk.net.au<http://www.gpk.net.au/> Did you know that you can now log faults by just sending an email to support(a)gpk.net.au<mailto:support@gpk.net.au> The information contained in or accompanying this e-mail is intended only for the use of the stated recipient and may contain information that is confidential and/or privileged. If the reader is not the intended recipient or the agent thereof, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited and may constitute a breach of confidence and/or privilege. If you have received this e-mail in error, please notify us immediately. Any views or opinions presented are those solely of the author and do not necessarily represent those of GPK Computers Pty Ltd.. Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this e-mail, the company cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments

2 2

realm --help
by Yagnesh Dave 17 Nov '09

17 Nov '09

Hi, I have a realm as "vsnl.net" given to all the users (approx 2800 users), with different passwords. I have defined it in the "proxy.conf" as realm vsnl.net { type = radius authhost = local accthost = local } So, is this correct, as i am not defining any secret above because it is different to all the users, and the radius server itself will reply to the authentication request. Also is there a way by which I can migrate from Merit Radius to Freeradius seamlessly, as cuurently what I am doing is I have a perl script to convert the users file of Merit Radius to the syntax that Free Radius has and then use it. Thanks and Regards, Dave.

2 1