Hi , I tried to setup configuration from different sources from  the web, but it’s not easy

I have cisco vpn access server where are more IPSEC proflles ( groups ). They should be authenticated against Freeradius.

One profile called Group1 should be authenticated against ntlm_auth_vpn ( already working), others against vpn_auth_name

So my Users file is:

DEFAULT          Auth-Type := ntlm_auth_vpn, NAS-IP-Address == 10.1.1.252

                Tunnel-Type = "ESP",

                Tunnel-Private-Group-ID = "Group1",

                Tunnel-Password = "cisco",

                Cisco-Avpair="ipsec:dns-servers=10.1.1.6 10.1.1.7",

                 Cisco-Avpair="ipsec:addr-pool=vpn_pool",

                Cisco-Avpair="ipsec:inacl=101",

                Cisco-Avpair="ipsec:key-exchange=ike",

                Cisco-Avpair="ipsec:key-exchange=preshared-key",

                Service-Type = Framed-User,

                Framed-Protocol = PPP,

DEFAULT        Auth-Type := vpn_auth_name, , NAS-IP-Address == 10.1.1.252

                          Service-Type = Framed-User,

                         Framed-Protocol = PPP,

                         Fall-Through = Yes

Point is that the group Group1 should be authenticated against ntlm_auth_vpn, other groups against vpn_auth_name

However this config doesn’t work, debug lokks strange ( takes only first Cisco Avpair attribute ), probably something wrong In the config

Thanks fro your help

pet