Freeradius-Devel Digest, Vol 88, Issue 1

[karthik kumar]

Hi Fajar,

First of all thanks for fast reply . I have used following config changes
in users and clients.conf , do ppoe session requires any special changes.
Please suggest me inline questions.

http://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-3

Attribute value 61 ---> Nas-port-type

32PPPoEoE - PPP over Ethernet over Ethernet
Should this be configured for users.conf or client.conf file ?





[root at PC4-Abhi raddb]# more users
cisco      Auth-Type       := Local, User-Password = "cisco"
               cisco-avpair    = "shell:Admin=Admin default-domain karthik
karthik1"

DEFAULT Framed-Protocol == PPP
        Framed-Protocol = PPP,
        Framed-Compression = Van-Jacobson-TCP-IP





[root at PC4-Abhi raddb]# more clients.conf   ..


client 78.0.0.0/16 {
        secret          = cisco
        shortname       = cisco
        nastype         = cisco                   >>>>>>>>>>>>>>>>>> should
it be other ? do we have to configure NAS-ip and attribute value and type ?
 }




Thanks,
K. Karthik Kumar










On Wed, Aug 1, 2012 at 3:30 PM, <
freeradius-devel-request at lists.freeradius.org> wrote:

> Send Freeradius-Devel mailing list submissions to
>         freeradius-devel at lists.freeradius.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         http://lists.freeradius.org/mailman/listinfo/freeradius-devel
> or, via email, send a message with subject or body 'help' to
>         freeradius-devel-request at lists.freeradius.org
>
> You can reach the person managing the list at
>         freeradius-devel-owner at lists.freeradius.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Devel digest..."
>
>
> Today's Topics:
>
>    1. BNG(BRAS) + free radius (karthik kumar)
>    2. Re: BNG(BRAS) + free radius (Fajar A. Nugraha)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Wed, 1 Aug 2012 13:04:57 +0530
> From: karthik kumar <mail2karthek at gmail.com>
> To: freeradius-devel at lists.freeradius.org
> Subject: BNG(BRAS) + free radius
> Message-ID:
>         <
> CANHveityOa4QmOe2EX6K4CsX8zdATxPqEBUD-muaFbRb3PCLLw at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi Team,
>
>
>
> I have used free radius for authentication purpose  but I never tried for
> BNG.
>
>
>
>
>
> MY requirement is as follows:
>
>
>
>
>
>
>
> PPOE client (router)       -----------------------?      PPOE
> server(router)    -------------? Free
> radius
>
>
>
>
>
>
> When many internet users try to connect to isp router the free radius
> connected to the ppoe server should authenticate all the users in the
> client.  What are the configuration changes need to be applied in the free
> radius.
>
>
>
>
>
>
>
>
>
> https://supportforums.cisco.com/docs/DOC-19726   >>>>>>>>>>>>.
> Configuration explaination
>
>
>
>
>
> Thanks,
>
> K. Karthik Kumar
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20120801/4116f670/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 2
> Date: Wed, 1 Aug 2012 14:48:34 +0700
> From: "Fajar A. Nugraha" <list at fajar.net>
> To: FreeRadius developers mailing list
>         <freeradius-devel at lists.freeradius.org>
> Subject: Re: BNG(BRAS) + free radius
> Message-ID:
>         <
> CAG1y0sd1LBhrJVReV2r8TEWyf0qC_QCEQjG5ctbeYMOpg82nCA at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> On Wed, Aug 1, 2012 at 2:34 PM, karthik kumar <mail2karthek at gmail.com>
> wrote:
>
> > I have used free radius for authentication purpose
>
> Authentication for what? wireless AP?
>
> > When many internet users try to connect to isp router the free radius
> > connected to the ppoe server should authenticate all the users in the
> > client.
>
> Meaning what, exactly?
>
> If you mean "check client's user/password, and if it's correct send
> access-accept", then that's what radius does, nothing special there.
>
> >  What are the configuration changes need to be applied in the free
> > radius.
>
> Generally speaking, radius (ANY radius) doesn't really care what
> device acts as NAS. It can be wireless AP, pppoe/pptp server, BRAS,
> GGSN, whatever. If they can use the same authentication mechanism
> (e.g. PAP, MSCHAPv2, EAP-PEAP-MSCHAPv2) then the radius-side setup is
> the same no matter what the NAS is.
>
> --
> Fajar
>
>
> ------------------------------
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/devel.html
>
>
> End of Freeradius-Devel Digest, Vol 88, Issue 1
> ***********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20120802/a3bd8dbe/attachment.html>