Radius Tunnel Attributes (Tunnel switching with Cisco Router)

[Tim Warnock]

> -----Original Message-----
> From: cistron-radius-bounces at lists.cistron.nl 
> [mailto:cistron-radius-bounces at lists.cistron.nl] On Behalf Of 
> mike at ostw.de
> Sent: Tuesday, 14 June 2005 12:20 AM
> To: cistron-radius at lists.cistron.nl
> Subject: Radius Tunnel Attributes (Tunnel switching with Cisco Router)
> 
> Hi,
> 
> im new to this list and looking forward to get a solution for 
> my problem
> listet below :)
> 
> I have a working configuration like 
> 
> dialinuser-texas -> cisco7200 -> cistron radius-server-texas
> 
> Any dialinrequests (acct&auth) are given from the cisco to the cistron
> radius-server, works nice, usere will be locally terminatet 
> (authenticatet).
> Now i want to switch SOME of our dialinusers to a different 
> cisco like this,
> 
> dialinuser-newyork -> cisco7200 -> cistron 
> radius-server-texas -> cisco3600
> (ip:20.20.20.20) -> cistron-radius-server-newyork
> 
> I heard, that it is possible to configure the cistron user 
> (with tunnel
> attributes) like this (example from cisco.com)
> 
> Cistron-server-Texas:
> 
> username-texas Password = "12345"
>     Service-Type = Outbound-User,
>     Tunnel-Type = L2TP,
>     Tunnel-Medium-Type = IP,
>     Tunnel-Server-Endpoint = "20.20.20.20",
>     Tunnel-Assignment-Id = "1",
>     Tunnel-Password = "test",
> 
> Is this configuration ok ? anything missing ? i tested this 
> config, but it
> doesent work, user will not be switched to cisco with ip 
> 20.20.20.20, there
> is no incomming vpdn traffic (debug vpdn says nothing :( )
> How do i have to configure the cistron-server and cisco(s) 
> that dialinusers
> will be switched to another cisco ?
> any help is welcome !
> 
> greets
> mike
> 
> 
> - 
> List info/subscribe/unsubscribe? See 
> http://www.radius.cistron.nl/list/

Do you know whether you've included dictionary.tunnel in with your
dictionaries?

Also, the dictionary.tunnel is marked as experimental, so I guess maybe
miquel can let us know whether it should work for cisco or not.

Thanks
Tim Warnock

ISP Technical Manager
GetOnIt! Nationwide Internet.
1300 88 00 97
timoid (at) getonit.net.au