Re: (ASCEND) ascend and radius based connectionprofiles question

[Stephen Mulrine <skm@foremost.co.uk>]

Jan Ronken wrote:
>What I want to achieve:
>Customer A has a pipeline 50, IP adress 195.193.80.28/32 (and NAT). As
>soon as someone tries to connect to 195.193.80.28, the Max 4060 shoul
>dial out and establish the connection. With te connection profiles it
>works, but I need to do this in Radius.
>So, all information like route, ip address and callnumber needs to come
>from the radiusserver into the max.
>
>I tried the stuff below and update the Max so it read the config from the
>radius server, but the max does not dial out when trying to connect to
>195.193.80.28/32.
>
>myuser-out Password="ascend", User-Service=Dialout-Framed-User
>        User-Name="iyellow",
>        Ascend-Dial-Number="0204210219",
>        Framed-Protocol=PPP,
>        Framed-Address=195.193.80.28,
>        Framed-Netmask=255.255.255.0,
>        Ascend-Metric=2,
>        Framed-Routing=None,
>        Ascend-Idle-Limit=20,
>        Ascend-Send-Auth=Send-Auth-PAP,
>        Ascend-Send-Secret="secretpwd"
>
>Can you please help me out with a radius example on how to achieve this?

There are two entries which need to be added to your users file: one for
the route and one for the user.  Because a new route needs to be added,
this means reloading the configuration - may involve a reboot, I can't be
exactly sure.  We have a couple of users set up like this with a single IP
address, but we don't bother with any authentication on the outgoing call;
they reject the call and dial us back to avoid us having to pass on the
phone bills.  This example is lifted directly from my users file so for
the above reason, some of it won't apply to your situation:

  route-1 Password="ascend", User-Service=Dialout-Framed-User
    Framed-Route="192.168.123.234/32 195.168.123.234 1 n myuser-out"

  myuser-out Password="ascend"
    User-Service=Dialout-Framed-User,
    Framed-Protocol=PPP,
    Ascend-Data-Svc=Switched-64K,
    Ascend-Dial-Number="95551212",
    Ascend-Expect-Callback=Expect-Callback-Yes

The important bits are the Ascend-Data-Svc and Ascend-Dial-Number lines.
I got ISDN error codes until I specified Switched-64K (the default is
Switched-56K which should be fine for the US).  Ascend-Dial-Number must
conform to the usage given in the RADIUS Configuration Guide.  I have
"Use Trunk Grps=Yes" in System -> Sys Config, so I had to prefix the
number to be dialled with the digit which corresponded to the appropriate
trunk group.  I don't remember setting all the lines to be in trunk group
9 so I suspect that's the default.

Looking at your example, I think you may just have to add the route-N
entry and insert the extra digit in the phone number.  As your customer
is using NAT behind a single IP address then the route entry should be
for 195.193.80.28/32 and you'll probably also want to change the netmask
to 255.255.255.255.

Hope this helps,
Stephen
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>