Mailing List Archive

Per user vpdn
Does anyone have an example of how to apply radius attributes to a
single user to put him into a l2tp tunnel without the use of a realm? I
have a couple of user that need a vpn connection, but would rather apply
the changes in radius instead of alering their usernames to add domains
and make config change son the NAS.


Mike
Re: Per user vpdn [ In reply to ]
You should configure "vpdn authen-before-forward" on your LAC and the
RADIUS profile would look like this:

tunnelme Password=="cisco"
Service-Type = Framed-User,
Tunnel-Client-Auth-Id = "LAC",
Tunnel-Type = L2TP,
Tunnel-Medium-Type = IP,
Tunnel-Server-Endpoint = 10.1.1.1,
Tunnel-Password = "cisco"

Dennis

Mike Hyde [mhyde@escape.ca] wrote:
> Does anyone have an example of how to apply radius attributes to a
> single user to put him into a l2tp tunnel without the use of a realm? I
> have a couple of user that need a vpn connection, but would rather apply
> the changes in radius instead of alering their usernames to add domains
> and make config change son the NAS.
>
>
> Mike
>
> _______________________________________________
> cisco-nas mailing list
> cisco-nas@puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nas