thanks Alan
On Fri, Sep 20, 2013 at 9:44 PM, Alan DeKok wrote:
> Mehdi Ravanbakhsh wrote:
> > *i can not find any detailed document on this.*
>
> doc/rlm_sql. It's on the Wiki, and distributed with the server "tar"
> file.
>
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://
In strongswan for ikev1 it uses xauth-eap that I use to do validation with
RADIUS (that's the only way for ikev1 clients with strongswan).
My design is that I don't actually care about secondary authentication with
RADIUS since it's already doing certificate validation from strongswan side
befo
I am wondering is it possible to configure one server using a single IP to
handle PPTP/IPSEC <---> freeradius? Does it make sense (or possible) to create
a virtual servers against PPTP and IPSEC separately? I am just wondering
what's the best practice. I don't want to increase number of hardware
On 22/09/2013 15:12, WorkingMan wrote:
I am wondering is it possible to configure one server using a single IP to
handle PPTP/IPSEC <---> freeradius? Does it make sense (or possible) to create
a virtual servers against PPTP and IPSEC separately? I am just wondering
what's the best practice. I don
WorkingMan wrote:
> I am wondering is it possible to configure one server using a single IP to
> handle PPTP/IPSEC <---> freeradius?
Yes.
> Does it make sense (or possible) to create
> a virtual servers against PPTP and IPSEC separately?
If you want. Read raddb/sites-available/README. It
WorkingMan wrote:
> My design is that I don't actually care about secondary authentication with
> RADIUS since it's already doing certificate validation from strongswan side
> before doing secondary authentication. All is good if I was only need
> secondary authentication since I can bypass with
Alan DeKok deployingradius.com> writes:
>
> WorkingMan wrote:
> > I am wondering is it possible to configure one server using a single IP
to
> > handle PPTP/IPSEC <---> freeradius?
>
> Yes.
>
> > Does it make sense (or possible) to create
> > a virtual servers against PPTP and IPSEC separ
Alan DeKok deployingradius.com> writes:
>
> WorkingMan wrote:
> > My design is that I don't actually care about secondary authentication
with
> > RADIUS since it's already doing certificate validation from strongswan
side
> > before doing secondary authentication. All is good if I was only n
WorkingMan wrote:
> So from what I gather I can make my VPN servers pointing to different ports
> (in strongswan.conf) and have freeradius's listen{} pointing to matching
> ports but I can keep the same IP for the virtual servers.
Yes.
> Does this look correct (or at least conceptually)? My t
WorkingMan wrote:
> Can you give me an example on how to always accept connection on EAP-*
> authentication (it will be password based from xauth-eap from strongswan)
No. EAP doesn't (and can't) work that way.
> but at the same time still honour Expiration logic? I am not sure what to
> do
Hi,
i have problem when i configured for dhcp relay,
i have configured ./sites-enabled/dhcp-relay according to
https://github.com/FreeRADIUS/freeradius-server/blob/master/raddb/sites-available/dhcp.relay
and i have included dictionary.dhcp in ./dictionary config file,
but i still got error
*D
Which version is this?
2.2.0 should have DHCP support enabled by default. Older version (e.g. the
one bundled with debian/ubuntu) might not have that support yet.
--
Fajar
On Mon, Sep 23, 2013 at 10:17 AM, bayu setiawan wrote:
> Hi,
>
> i have problem when i configured for dhcp relay,
>
> i
this is my version
*radiusd: FreeRADIUS Version 2.1.12, for host i386-redhat-linux-gnu*
On Mon, Sep 23, 2013 at 10:25 AM, Fajar A. Nugraha wrote:
> Which version is this?
>
> 2.2.0 should have DHCP support enabled by default. Older version (e.g. the
> one bundled with debian/ubuntu) might not
On Mon, Sep 23, 2013 at 10:34 AM, bayu setiawan wrote:
> this is my version
>
> *radiusd: FreeRADIUS Version 2.1.12, for host i386-redhat-linux-gnu*
>
>
Short version: upgrade.
If you know how to build a package from source (i.e. rpmbuild), 2.2.0 has a
working spec file. Due to a recently discov
Is dhcp not available in 2.1.12 version?
and is my configure automaticly exitst if i built package from source for
latest 2.x.x version? so i don't need reconfigure it?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, Sep 23, 2013 at 11:35 AM, bayu setiawan wrote:
> Is dhcp not available in 2.1.12 version?
>
>
Yes, if you enable it.
> and is my configure automaticly exitst if i built package from source for
> latest 2.x.x version? so i don't need reconfigure it?
>
>
No idea what you mean by that.
If
16 matches
Mail list logo
