User Manual

Supported RADIUS Attributes Configuring Authenticated PPP Connections
D-5
If you are using a different server, please note that the file format for the Merit and Livingston RADIUS
servers are of following form:
Check-items are attribute/value pairs that must be received from the authentication client (for example, the
SCS) for authentication to occur. Reply-items are attribute/value pairs that will be returned to the client
upon authentication. Note that the Merit and Livingston Password attribute may be used to match either
User-Password or CHAP-Password.
Note: Please read your RADIUS server’s documentation for more information about
how to configure your RADIUS server.
D.3.1 Configuring Authenticated PPP Connections
The following entry allows user april to gain access to a LAN via PPP using the IP address 192.0.1.58:
This user may be authenticated via PPP PAP, PPP CHAP, or via the local mode username and password
prompts. If authenticated by the latter, the user will automatically be forced to execute the command Set
PPP sitename; Logout where sitename is the name of the site dynamically created by the SCS for this user.
Note: All settings in the default site other than the IP address will apply for this user.
Here is a more complicated example for a dialback PPP user who is not allowed to perform a local mode
login:
D.3.2 Forcing a Telnet Connection to Preferred Host
The following example shows a local mode user that is forced to Telnet to the SCS's preferred Telnet host:
The Telnet; Logout command is forced as soon as authentication is complete. To force the user to make an
Rlogin to connect to the preferred Telnet host, add Login-IP-Service = Rlogin to the reply-item list.
username check-item1, check-item2, ..., check-itemN
reply-item1,
reply-item2,
...,
reply-itemN
april
Password = fools
Service-Type = Framed,
Framed-Protocol = PPP,
Framed-IP-Address = 192.0.1.58
april
Password = fools, Service-Type = Framed, Framed-Protocol = PPP
Service-Type = Callback-Framed,
Framed-Protocol = PPP,
Framed-IP-Address = 192.0.1.233,
Callback-Number = 555 1234
froggy Password = ribbit
Service-Type = Login