Cisco ignores Framed-IP-Address from freeradius

[up at 3.am]

On Mon, 6 Jul 2009, Gilloteau Frederic wrote:

> Hello,
I use freeradius 2.1.1-7 and a CISCO router (IOS 12.4(6)T9) to provide VPN connections.
and the CISCO router gets it ...

.. but never assign it to remote users, the cisco router assigns an IP address from its local pool.

The interesting lines of my cisco configuration are :

aaa new-model
!
!
aaa authentication login ClientAuth group radius
aaa authorization network ClienAuth group radius local
aaa accounting delay-start
aaa accounting network ClientAuth start-stop group radius

I had a similar problem...it was with my aaa config.  Try:

aaa authentication login default local group radius
aaa authentication ppp default group radius local
aaa authorization exec default local
aaa authorization network default group radius local



James Smallacombe		      PlantageNet, Inc. CEO and Janitor
up at 3.am							    http://3.am
=========================================================================