radius and cisco

[Alan DeKok]

Jim McIver wrote:
> I'm a newbie and looking for instructions on how to setup FreeRADIUS 
> Version 1.1.7 on a SLES 10 linux box to use for authenication and  
> logging for a cisco 2801 router. I want to track users connecting 
> from the outside world using Cisco's vpn client and cisco sayes 
> radius is the answer.

  Yes.

> I'd like to start with just allowing users from the linux /etc/passwd 
> access and then move onto authenication from my Netware 6.5 LDAP 
> server.

  See the FAQ for getting started with FreeRADIUS.

> I've read all I can find on freeradius.org and cisco, but still don't 
> understand....hard learner I guess.
> 
> radiusd -xx gives:
...
> Ready to process requests.

  And no packets.  The server has to receive a request for it to be able
to do something.

> My radius.conf is what was installed as default.
> Q1? Do I need to add anything other than the below to client.conf?

  No.

> I believe the relavent part of the users file is:
> 
> DEFAULT Auth-Type = System
>         Fall-Through = 1

  Yes.

> Notes I've read say to change this to 255.255.255.255 ??

  Maybe.  Only if you're assigning IP addresses.

> Q2? I believe I also need to add something similar to the below in 
> the users file?

  Not if the users are being authenticated from /etc/passwd.

> Q3? Does "youruser" and "somepass" need to be a valid user from 
> /etc/passwd? I'm unclear if there is a link between users in this 
> file and valid users in /etc/passwd of the linux box.

  They are independent.

  Alan DeKok.