Hi I'm using free radius 1.1.3, with postgres on fedora core 5. I am trying to authenticate a user's request coming in from a Cisco VoIP gateway. The radius server accepts the request, and sends an accept to the gateway, but since it is VoIP, it is expecting h323 AV Pairs. Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user? Thanks Gef
"Geoffrey Cauchi" <agcauchi@winssystems.com> wrote:
Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user?
See the NAS documentation. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Not much mention there unfortunately. A practical example would help me most. Thanks Gef -----Original Message----- From: freeradius-users-bounces+agcauchi=winssystems.com@lists.freeradius.org [mailto:freeradius-users-bounces+agcauchi=winssystems.com@lists.freeradius.o rg] On Behalf Of Alan DeKok Sent: 06 September 2006 18:00 To: FreeRadius users mailing list Subject: Re: Freeradius + Cisco VoIP "Geoffrey Cauchi" <agcauchi@winssystems.com> wrote:
Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user?
See the NAS documentation. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Geoffrey I am using Cisco 3600. In my case, I have found out the following issues with AV pairs: Call Leg 1: Cisco sends the following AV pairs to the radius server: User-Name User-Password h323-conf-id Cisco-AVPair=h323-ivr-out NAS-Port-Type cisco-nas-port NAS-Port Cisco-AVPair=interface Service-Type NAS-IP-Address Cisco expects to see the following AV pairs sent by the radius server: h323-credit-amount h323-credit-time h323-return-code Call Leg 2: Cisco sends the following AV pairs to the radius server: User-Name User-Password h323-conf-id Cisco-AVPair=h323-ivr-out Called-Station-Id Service-Type NAS-IP-Address Cisco expects to see the following AV pairs sent by the radius server: h323-credit-amount h323-credit-time h323-return-code The above AV pairs are for authenticating the user, after these two call legs, you should concern accounting the user. I think there are no AV pairs sent by the radius server for accounting, since it just waits until Cisco sends the stop packet. Of course, there are two different sets of AV pairs that are both have Acct-Status-Type=stop, but these two sets are for Call Leg 3 and 4, and they differ in one or two AV pairs from which you can determine the different call legs. Hope this information can help you. Best Ragrds Ali On 9/6/06, Geoffrey Cauchi <agcauchi@winssystems.com> wrote:
Not much mention there unfortunately. A practical example would help me most.
Thanks Gef
-----Original Message----- From: freeradius-users-bounces+agcauchi= winssystems.com@lists.freeradius.org [mailto: freeradius-users-bounces+agcauchi=winssystems.com@lists.freeradius.o rg] On Behalf Of Alan DeKok Sent: 06 September 2006 18:00 To: FreeRadius users mailing list Subject: Re: Freeradius + Cisco VoIP
"Geoffrey Cauchi" <agcauchi@winssystems.com> wrote:
Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user?
See the NAS documentation.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Alan I replied Geoffrey with all I knew about AV pairs expected by a Cisco VoIP gateway. But I have another problem. I am using rlm_example to develop a module to handle VoIP stuff. My question is, how should I pack and send those AV piars expected by the gateway? For example, in example_authenticate function, I should return a number of AV pairs to the gateway in order to authenticate the user. How should I do that? Best Regards Ali On 9/6/06, Alan DeKok <aland@deployingradius.com> wrote:
"Geoffrey Cauchi" <agcauchi@winssystems.com> wrote:
Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user?
See the NAS documentation.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello Ali I do not know whether you managed to solve your issue, however using a perl script, the format to send these AV Pairs is: #!/usr/bin/perl print "Cisco-AVPair += \"h323-return-code=0\"\,\n"; print "Cisco-AVPair += \"h323-credit-amount=30\"\,\n"; print "Cisco-AVPair += \"h323-credit-time=200\"\n"; exit(0); And now the script works. Obviously the h323-credit-time and h323-credit-amount need to be calculated in real time, but the above can be used as a test to allow you to utilise the cisco TCL script with freeradius Hope this helps Gef ________________________________________ From: freeradius-users-bounces+agcauchi=winssystems.com@lists.freeradius.org [mailto:freeradius-users-bounces+agcauchi=winssystems.com@lists.freeradius.o rg] On Behalf Of Ali Majdzadeh Sent: 07 September 2006 10:06 To: FreeRadius users mailing list; aland@deployingradius.com Subject: Re: Freeradius + Cisco VoIP Hi Alan I replied Geoffrey with all I knew about AV pairs expected by a Cisco VoIP gateway. But I have another problem. I am using rlm_example to develop a module to handle VoIP stuff. My question is, how should I pack and send those AV piars expected by the gateway? For example, in example_authenticate function, I should return a number of AV pairs to the gateway in order to authenticate the user. How should I do that? Best Regards Ali On 9/6/06, Alan DeKok <aland@deployingradius.com> wrote: "Geoffrey Cauchi" <agcauchi@winssystems.com> wrote:
Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user?
See the NAS documentation. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Gef I solved the problem through C and rlm_modules. Anyway, Thanks a lot. Regards On 9/21/06, Geoffrey Cauchi <agcauchi@winssystems.com> wrote:
Hello Ali
I do not know whether you managed to solve your issue, however using a perl script, the format to send these AV Pairs is:
#!/usr/bin/perl print "Cisco-AVPair += \"h323-return-code=0\"\,\n"; print "Cisco-AVPair += \"h323-credit-amount=30\"\,\n"; print "Cisco-AVPair += \"h323-credit-time=200\"\n"; exit(0);
And now the script works.
Obviously the h323-credit-time and h323-credit-amount need to be calculated in real time, but the above can be used as a test to allow you to utilise the cisco TCL script with freeradius
Hope this helps
Gef ________________________________________ From: freeradius-users-bounces+agcauchi= winssystems.com@lists.freeradius.org [mailto: freeradius-users-bounces+agcauchi=winssystems.com@lists.freeradius.o rg] On Behalf Of Ali Majdzadeh Sent: 07 September 2006 10:06 To: FreeRadius users mailing list; aland@deployingradius.com Subject: Re: Freeradius + Cisco VoIP
Hi Alan I replied Geoffrey with all I knew about AV pairs expected by a Cisco VoIP gateway. But I have another problem. I am using rlm_example to develop a module to handle VoIP stuff. My question is, how should I pack and send those AV piars expected by the gateway? For example, in example_authenticate function, I should return a number of AV pairs to the gateway in order to authenticate the user. How should I do that?
Best Regards Ali On 9/6/06, Alan DeKok <aland@deployingradius.com> wrote: "Geoffrey Cauchi" <agcauchi@winssystems.com> wrote:
Can anyone provide a sample config of the AV Pairs required by a cisco VoIP gateway to accept a user?
See the NAS documentation.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Ali Majdzadeh -
Geoffrey Cauchi