Re: Configuring Radius for Cisco equipment

On Tue, 7 Dec 2004, Chris Partsenidis wrote:

> The goal is to use MySQL,

This will be an easy transition once you get the cisco/radius
interaction working the way you want. Take the gnu-radius manual
templates and instructions for setting up the mysql database.

> What I am now trying to figure out is how to get reverse-Telnet
> happening. From the Cisco documents I've downloaded, there is a sample
> script:

Someone else here might have experience with that but if no one can
answer you here you might try cisco-nsp or cisco-nas mailing lists.

https://puck.nether.net/mailman/listinfo/cisco-nas
https://puck.nether.net/mailman/listinfo/cisco-nsp

I'm on nsp, but nas might be more suited for this particular question.

> cisco-avpair = "raccess:port#1=maple/tty2""

I'm throwing a guess at this but with my setup I would try to put this
in the attrib database Cisco-AVPair = "blah" for the Username that you
want this enabled for. Your double quotes are unbalanced in that line
above though.

I'm not familiar with setting up reverse telnet, perhaps the nsp or nas
list could tell you what is supposed to be sent where to enable this and
this list can tell you how to make gnu-radius feed the NAS whatever it
wants.

Gerald