Re: IAS Proxy - adding reply attributes

From: Sam Salhi [MSFT] (samers_at_online.microsoft.com)
Date: 01/09/05


Date: Sat, 8 Jan 2005 18:16:48 -0800

The proxy will add both. All you need to do is goto advanced tab in the
profile, and add whatever attributes you want in the access accept packet

-- 
      =============================================
  This posting is provided "AS IS" with no warranties, and confers no rights
      =============================================
"JayJ" <jmcinnes@mighty.co.za> wrote in message 
news:1105119522.183398.240820@f14g2000cwb.googlegroups.com...
> Hi all
>
> I have a situation where I need RADIUS reply attributes set in order
> for PPTP clients connecting to my Cisco PIX to support MPPE encryption.
>
>
> We are using Activcard to authenticate users, but I can't seem to be
> able to get Activcard to supply the correct RADIUS reply attributes,
> with the result that the PPTP connection attempts fail.
>
> What I need to find out is: can IAS proxy requests to the Activcard
> RADIUS server, and then add RADIUS-reply attributes to the replies that
> get sent back to my Cisco PIX firewall? Or will it only send back the
> attributes that come from the Activcard RADIUS server?
> Thanks for any assistance.
>
> Jason
> 


Relevant Pages

  • Re: Radius question
    ... The AS5300 can do this directly - without the need for the proxy ... on the proxy radius server should also work for you. ... > like to split in this way as it requires no config by the customer. ... > Ask us about our online Antivirus and Junk mail scanning service ...
    (freebsd-isp)
  • Using RADIUS with multiple proxy sources
    ... I'm interested in best practices or past experiences setting up RADIUS ... I can set up a RADIUS server to proxy the login request to a token ...
    (comp.security.misc)
  • Using RADIUS with multiple proxies
    ... I'm interested in best practices or past experiences setting up RADIUS ... I can set up a RADIUS server to proxy the login request to a token ...
    (comp.security.firewalls)