I have a Centos 5.3 server running the latest version of FreeRadius.

I have 15 routers that need to be authenticated on an ADSL network.

I am experiencing duplicate results for a radtest on my Freeradius server. I need to send multiple Cisco-AVPair values for a user login. I read on the Wiki that I should use the += operator to do this. The RadReply table is as follows:

id	Username	Attribute	Op	Value
1	test@test.net	Framed-Protocol	:=	PPP
2	test@test.net	Framed-IP-Netmask	:=	255.255.255.0
3	test@test.net	Framed-IP-Address	:=	176.25.165.1
4	test@test.net	Cisco-AVPair	:=	ip:route=176.25.165.0 255.255.255.0 176.25.165.1
5	test@test.net	Cisco-AVPair	+=	ip:route=0.0.0.0 0.0.0.0 #.#.#.#
6	test@test.net	Cisco-AVPair	+=	ip:dns-servers=#.#.#.# #.#.#.#

The results get back are

Framed-Protocol = PPP

Framed-IP-Netmask = 255.255.255.0

Framed-IP-Address = 176.25.165.1

Cisco-AVPair = ip:route=176.25.165.0 255.255.255.0 176.25.165.1

Cisco-AVPair = ip:route=0.0.0.0 0.0.0.0 #.#.#.#

Cisco-AVPair = ip:dns-servers=#.#.#.# #.#.#.#

Cisco-AVPair = ip:route=0.0.0.0 0.0.0.0 #.#.#.#

Cisco-AVPair = ip:dns-servers=#.#.#.# #.#.#.#

As you can see, the last two Cisco-AVPair lines, that have the attribute of ‘+=’, appear twice in the returned values. If I change the operator to anything else e.g. ‘:=’ or ‘=’ I don’t get a reply for them at all when doing a radtest.

Does anyone know why this is happening and does it matter that it is happening?

Mark Smith

Systems Engineer

Abel Alarm Co Ltd