Auth-Type := Accept - CHAP problems

Thomas Buchberger buchberger at
Wed Aug 20 14:19:23 CEST 2008

Ivan Kalik wrote:
> Add Fall-Through = Yes to the DEFAULT entry if you want to check entries
> that come later in users file.
Fall-Through is active.

With PAP it works - but not with CHAP. That's the problem ...
I think the CHAP module handles wrong passwords and auth-type different
than the rlm_pap module.

Config looks like this:

DEFAULT        Auth-Type := Accept
    ERX-Virtual-Router-Name = "vpn:XXX",
    ERX-Egress-Policy-Name = "XXX",
    ERX-Local-Loopback-Interface = "loopback 255",
    Service-Type = Framed-User,
    Framed-Protocol = PPP,
    Fall-Through = Yes

Test100 Password = "Test100"
    ERX-Virtual-Router-Name := YYY,
    ERX-Egress-Policy-Name := "YYY"

We're using Version 1.1.6 and give 2.0.5 a try...

Thomas Buchberger

More information about the Freeradius-Users mailing list