|
|
ru.cisco- RU.CISCO --------------------------------------------------------------------- From : Mike Lesnichenko 2:5054/1.4 31 May 2005 12:18:14 To : All Subject : per-user access-list из freeradius --------------------------------------------------------------------------------
Пытаюсь примерно следующим образом установить пользователю access-list:
=== Cut ===
DEFAULT Service-Type == Framed-User
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Framed-IP-Netmask = 255.255.255.255,
Cisco-AVPair = "ip:dns-servers=192.168.10.2",
Fall-Through = 1
testuser Auth-Type:=Local,User-Password=="testpass",Service-Type==Framed-User
Cisco-AVPair += "ip:inacl#1 permit ip any any"
=== Cut ===
Получаю вот такой отлуп. Подскажите, где я ошибся?
=== Cut ===
May 31 06:16:54: RADIUS: Received from id 1645/85 192.168.10.1:1812,
Access-Accept, len 123
May 31 06:16:54: RADIUS: authenticator 69 A9 36 E9 E6 50 AC FA - 08 AE AA 38 0D
65 D2 E4
May 31 06:16:54: RADIUS: Service-Type [6] 6 Framed
[2]
May 31 06:16:54: RADIUS: Framed-Protocol [7] 6 PPP
[1]
May 31 06:16:54: RADIUS: Framed-IP-Netmask [9] 6 255.255.255.255
May 31 06:16:54: RADIUS: Vendor, Cisco [26] 37
May 31 06:16:54: RADIUS: Cisco AVpair [1] 31
"ip:dns-servers=192.168.10.1"
May 31 06:16:54: RADIUS: Cisco AVpair [1] 30 "ip:inacl#1 permit ip
any any"
May 31 06:16:54: RADIUS: Session-Timeout [27] 6 429
May 31 06:16:54: RADIUS: Framed-IP-Address [8] 6 192.168.10.66
May 31 06:16:54: RADIUS(000003E6): Received from id 1645/85
May 31 06:16:54: RADIUS/DECODE: parse VSA parts error
May 31 06:16:54: RADIUS/DECODE: convert VSA string; FAIL
May 31 06:16:54: RADIUS/DECODE: cisco VSA type 1; FAIL
May 31 06:16:54: RADIUS/DECODE: VSA; FAIL
May 31 06:16:54: RADIUS/DECODE: decoder; FAIL
May 31 06:16:54: RADIUS/DECODE: attribute Vendor-Specific; FAIL
May 31 06:16:54: RADIUS/DECODE: parse response op decode; FAIL
May 31 06:16:54: RADIUS/DECODE: parse response; FAIL
May 31 06:16:54: BR2/0:2 PAP: O AUTH-NAK id 15 len 26 msg is "Authentication
failed"
=== Cut ===
WBR, Mike
--- GoldED+/W32 1.1.4.7
* Origin: ...и велосипед. А космос не для меня! (2:5054/1.4)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
Архивное /ru.cisco/2241429c0462.html, оценка из 5, голосов 10
|