Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) NAT works! but not through RADIUS



> From Kevin A. Smith Mon, May 04, 1998 at 01:55:58PM -0700
> At 11:16 PM 5/3/98 -0400, Jerry Swann wrote:
> >Well, I've been able to get NAT to work.  But only when the account
> >is local to the box, I would like to get this to work through radius
> >but so far I can't get it configured correctly.  If somebody could
> >provide me with a sample radius entry for a box that is doing NAT, I
> >really would appreciate it.
> 
> It really is pretty straightforward, since a NAT entry will look exactly
> like any individual dial-in account. You can have them assigned a 
> static address, or dynamic address from the pool(s).
> 
> Do you have a current entry to look at, so we can just correct what
> you are using now?

I am currently trying this entry (or variants thereof):

isdn-127a  Password = "PASSWORD",User-Service=Framed-User
        Framed-Protocol=MPP,
        Ascend-Route-IP=Route-IP-Yes,
        Framed-Address=130.207.162.116,
        Framed-Netmask=255.255.255.255,
        Framed-Routing=Broadcast,
        Ascend-Metric=2,
        Framed-Compression=Van-Jacobson-TCP-IP,
        Ascend-Idle-Limit=20

But, when I try this I don't get in, and this shows up in syslog:

May  5 09:55:55 ASCEND: call 16 CL 0K  u=isdn-127a c=42 p=65 s=64000 r=64000

On my chart, this shows up as a PAP authentication problem, which doesn't
make sense since it works when it's a local profile on the box.

-- 
Jerry.Swann@oit.gatech.edu
Georgia Institute of Technology
Office Phone: 404 894-1659
Office Fax:   404 894-9548
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


Follow-Ups: References: