On 09/03/11 10:03, Paul Thornton wrote:
This is the part that is the mystery. There seems to be scarce information out there about how pppd functions when using radius as a back end (apart from it should 'just work') - most of the documentation about pppd relates to dial-up as a ppp client or a server without using radius.
The pppd radius plugin basically replaces the built-in functions in pppd: check_pap check_chap check_mschap ...with it's own, radius-based versions (not those names - something else). It (like most of pppd) is a horrible bit of code, but it does basically work ;o) You need to configure pppd itself to use "chap". This is independent of any radius config - it'll be something like: /etc/ppp/options.<theconnection>: require-chap refuse-pap refuse-mschap refuse-mschap-v2 ...or those same options on the pppd command line, or however your PPPoE daemon takes them.