"Stoll, Simon" <[EMAIL PROTECTED]> wrote:
> I want to authenticate PPTP VPN's on a Cisco PIX 520 with MS-CHAP and =
> MPPE,
> how does the Radius User File has to look like? Right now it works fine
> without encryption and PAP, but this isn't good for a save VPN :-)

  No.  The PAP password is encrypted when it's sent over the wire.
MS-CHAP isn't much better.

  For the 'users' file, you'd just change the default Auth-Type to MS-CHAP.

> I'm using freeradius 0.1 on a 2.4.5 Slackeware-Linux.

  Please upgrade to the latest CVS snapshot.  That has a LOT of bugs
fixed over 0.1.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to