From owner-freebsd-net@FreeBSD.ORG Tue Oct 25 05:00:51 2005 Return-Path: X-Original-To: net@FreeBSD.org Delivered-To: freebsd-net@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9AAAF16A424; Tue, 25 Oct 2005 05:00:51 +0000 (GMT) (envelope-from fooler@skyinet.net) Received: from smtp2.skyinet.net (smtp2.skyinet.net [202.78.97.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2A3BE43D5D; Tue, 25 Oct 2005 05:00:47 +0000 (GMT) (envelope-from fooler@skyinet.net) Received: from fooler (fooler.ilo.skyinet.net [202.78.118.66]) by smtp2.skyinet.net (Postfix) with SMTP id C4B685BA43; Tue, 25 Oct 2005 13:00:45 +0800 (PHT) Message-ID: <04b701c5d921$1066ae00$42764eca@ilo.skyinet.net> From: To: "Marcin Jessa" References: <20051019235111.2225345e.lists@yazzy.org><20051020070145.GA59364@cell.sick.ru><20051020131549.5e432073.lists@yazzy.org><20051020123159.33f6fa33.lists@yazzy.org><07c501c5d5e1$0ddf67f0$42764eca@ilo.skyinet.net><20051021112934.7c857fcc.lists@yazzy.org><002801c5d634$fdc66bd0$42764eca@ilo.skyinet.net><20051021145523.097758f5.lists@yazzy.org><016201c5d845$84992820$42764eca@ilo.skyinet.net> <20051024132236.01e59929.lists@yazzy.org> Date: Tue, 25 Oct 2005 13:00:47 +0800 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 1 X-MSMail-Priority: High X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Cc: brian@Awfulhak.org, glebius@FreeBSD.org, net@FreeBSD.org Subject: Re: PPPoE and Radius on 6.0RC1 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Oct 2005 05:00:52 -0000 ----- Original Message ----- From: "Marcin Jessa" To: Cc: ; Sent: Monday, October 24, 2005 9:22 PM Subject: Re: PPPoE and Radius on 6.0RC1 > It does. Everything is working now. good to hear that :-> > Any idea how to make ppp support all the methods at the same time so > the client can chose what to use? just enable those parameters instead of disable it... but still the client is the one choosing what kind of authentication takes place... but i still strongly advise to use mschapv2 instead of pap, chap and mschapv1 for security purposes both for wired and wireless pppoe authentication... > It's working now after lots of tweaking with ppp config and kernel > options. > Thanks a lot. one important side note especially if you are using radius for your pppoe authentication and the radius accounting server is at remote location... after the client disconnects... ppp will just simply send *one* accounting packet without waiting for the reply from radius accounting server for acknowledgement and exit immediately... this will affect your proper accounting and single login policy because the radius server still think that the user is still online... brian, to whom we will contact to fix this problem? thanks... fooler.