RE: Static Route Assignment

2003-08-14 Thread Robert LaGrasse
Should be just a matter of "redistibrute static" under your bgp config in
the NAS. You'll have to have a default metric assigned under BGP in order to
get the routes to redistribute.

-B

-Original Message-
From: Steve Hutchison [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 07, 2003 1:02 PM
To: [EMAIL PROTECTED]
Subject: Static Route Assignment


Is there a way to assign static routes to a customer that is dialing into a
NAS and have the route then distributed via BGP? I have multiple NAS's in
which the customer can land on and need a dynamic answer

I am looking at applying Cisco-AVPair "ip:route=1.1.1.1 255.255.255.0
2.2.2.2" to a customer that is dialing into a NAS w/ multiple ISDN Bri lines
and then distributing via BGP.. 



- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FreeRadius Authentification Problem

2003-08-14 Thread Robert LaGrasse
I ran into something similar a while back. Try removing the "radius server
key" statement in the router config and re-entering it. 

-B

-Original Message-
From: Serg Shipaev [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 06, 2003 8:07 AM
To: [EMAIL PROTECTED]
Subject: Re: FreeRadius Authentification Problem


Atanu Das wrote:

>Hi Serg
>- Original Message - 
>From: "Serg Shipaev" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Wednesday, August 06, 2003 2:24 PM
>Subject: Re: FreeRadius Authentification Problem
>
>
>  
>
>>In naslist the following row, I can find:
>>212.53.35.102212.53.35.102cisco
>>no more info for this NAS I can't find.
>>
>>
>>
>
>in the clients.conf file does the shortname value same as the value given
in
>the naslist file
>
>naslist file should have the following
>NASShort NameType
>
>client.conf
>IP {
>secret=
>shortname=
>type=
>}
>
>Your shortname value should match with the value given with the naslist.
>
>Regards,
>
>Atanu Das
>ssnetcom pvt .ltd
>www.ssnetcom.com
>  
>
>
They are the same.
:-(((

Best regards,
Serg


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Advantages of Using SQL ?

2003-08-06 Thread Robert LaGrasse
If I could remember the names and numbers of millions of girlfriends
simultaneously, I could still call any of them faster myself. Having a
secretary to keep track of my dates and remind me when special occasions
come up is also useful. Either way, I'm a pretty happy guy... 

;)


-Original Message-
From: SIMICRO ML [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 05, 2003 1:32 AM
To: [EMAIL PROTECTED]
Subject: Re: Advantages of Using SQL ?


Peter Nixon wrote:
> On Tue August 5 2003 06:37, Evren Yurtesen wrote:

> Its like saying that example B is faster than example A in the following 
> scenario:
> 
> A) You need to call your girlfriend. You know her number, so you dial it
and 
> talk to her.
> 
> B) You need to call your girlfriend, You don't know her number so you call

> your secretary and ask her to look it up in the phone book. Your secretary

> looks up the number, calls you back and give it to you, then you call your

> girlfriend.
> 
> Which do you thing is faster?? Bzzzt. WRONG ANSWER. Just because the phone

> book has a great, wonderfully efficient index, and your secretary is very 
> good at using it, doesn't mean that it's faster than having the number in 
> your own head

... and what if you had _millions_ of girlfriends :-D

@+
-- 
DouRiX
   [PLEBISCITE, n. A popular vote to ascertain the will of the sovereign. --
Ambrose Bierce]




- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Cisco Access Levels (Solution)

2003-07-31 Thread Robert LaGrasse
I was looking more for how to setup the server itself, but I figured that
out. For those interested, here is the complete solution. In my particular
situation, I needed different access permissions for the network engineering
and network operations groups...

On the cisco side (very basic setup):

aaa new-model
aaa authentication login console radius [pick backup method!]
aaa authorication exec radius [pick backup method]

line con 0
 login authentication console
line vty 0 4
 login authentication console
line aux 0 
 login authentication console

/usr/local/etc/raddb/users file:

DEFAULT Group == "neteng", Auth-Type := System
Service-Type = Shell-User,
cisco-avpair = "shell:priv-lvl=15"

DEFAULT Group == "netops", Auth-Type := System
Service-Type = Shell-User,
cisco-avpair = "shell:priv-lvl=1"

On the server itself:

Setup a group called neteng, and assign engineers to this group.
Setup a group called netops, and assign operations people to this group.


--

> > Hi All:
> >
> > I didn't see this in the FAQ, but I'm sure someone has done this before:
> >
> > I want to set the server up to authenticate/authorize telnet access
> against
> > the local linux user database. I need one group of users to have regular
> old
> > login access, and the other to have priviledge level (15) access.
> >
> > If there is an example of this somewhere, just point the way.
> >
> > I'm a newbie here, so please be gentle :) Thanks in advance for your
help.
> >
> > -B
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Cisco Access Levels

2003-07-30 Thread Robert LaGrasse
Hi All:

I didn't see this in the FAQ, but I'm sure someone has done this before:

I want to set the server up to authenticate/authorize telnet access against
the local linux user database. I need one group of users to have regular old
login access, and the other to have priviledge level (15) access. 

If there is an example of this somewhere, just point the way.

I'm a newbie here, so please be gentle :) Thanks in advance for your help. 

-B

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html