Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Oct 2005 13:00:47 +0800
From:      <fooler@skyinet.net>
To:        "Marcin Jessa" <lists@yazzy.org>
Cc:        brian@Awfulhak.org, glebius@FreeBSD.org, net@FreeBSD.org
Subject:   Re: PPPoE and Radius on 6.0RC1
Message-ID:  <04b701c5d921$1066ae00$42764eca@ilo.skyinet.net>
References:  <20051019235111.2225345e.lists@yazzy.org><20051020070145.GA59364@cell.sick.ru><20051020131549.5e432073.lists@yazzy.org><20051020123159.33f6fa33.lists@yazzy.org><07c501c5d5e1$0ddf67f0$42764eca@ilo.skyinet.net><20051021112934.7c857fcc.lists@yazzy.org><002801c5d634$fdc66bd0$42764eca@ilo.skyinet.net><20051021145523.097758f5.lists@yazzy.org><016201c5d845$84992820$42764eca@ilo.skyinet.net> <20051024132236.01e59929.lists@yazzy.org>

next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message ----- 
From: "Marcin Jessa" <lists@yazzy.org>
To: <fooler@skyinet.net>
Cc: <glebius@FreeBSD.org>; <net@FreeBSD.org>
Sent: Monday, October 24, 2005 9:22 PM
Subject: Re: PPPoE and Radius on 6.0RC1


> It does. Everything is working now.

good to hear that :->

> Any idea how to make ppp support all the methods at the same time so
> the client can chose what to use?

just enable those parameters instead of disable it... but still the client 
is the one choosing what kind of authentication takes place... but i still 
strongly advise to use mschapv2 instead of pap, chap and mschapv1 for 
security purposes both for wired and wireless pppoe authentication...

> It's working now after lots of tweaking with ppp config and kernel
> options.
> Thanks a lot.

one important side note especially if you are using radius for your pppoe 
authentication and the radius accounting server is at remote location... 
after the client disconnects... ppp will just simply send *one* accounting 
packet without waiting for the reply from radius accounting server for 
acknowledgement and exit immediately... this will affect your proper 
accounting and single login policy because the radius server still think 
that the user is still online...

brian, to whom we will contact to fix this problem? thanks...

fooler. 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?04b701c5d921$1066ae00$42764eca>