Re: Radius and IPX

John Storms (jstorms@livingston.com)
Mon, 21 Oct 1996 08:11:29 -0700

At 02:24 PM 10/20/96 -0400, you wrote:
>What do I do with this line in my Radius Database file:
>
>Framed-IPX-Network = 0.0.0.0
>
>I have a Netware server I want 20+ employees with different dialup
>accounts to access. Does each account get a different number?

Yes, each PPP user dialing in for IPX needs to have their own unique IPX
number. In IPX each 'wire' needs its own IPX network number and here the
phone line needs its own IPX network number.

>How does this work?

http://www.livingston.com/Tech/Appnotes/app.ipx-dialin.shtml

TITLE: DIALIN IPX USER OVER PPP
DATE: August 20, 1996

SUMMARY:

In order for a user to dialin to a Portmaster the user
needs to have a PPP user profile (on the portmaster or in
RADIUS) with an IPX network number. The IPX
network number assigned to the Portmasters netuser
must be a system unique network number. Also the the
MTU setting must be set to 1500. The IPX network
number is an 8 digit hex number.

BEFORE YOU START:

In order to do IPX assigned addressing for dialin IPX
netusers, you must first assign a pooled IP address to
your portmaster by.

Command> set assigned [starting ip address for pool]

The netusers IPX network number entry must be
FFFFFFFE, which is a signal to the Portmaster that the
netuser will be utilizing assigned/pooled addressing. The
portmaster inturn converts the assigned IP address to the
hex and uses that hex number as the IPX network
number.

ADDING AN IPX USER TO THE
PORTMASTER:

Command> add netuser bclinton
New User successfully added

Command> set user bclinton password medicare1
Command> set user bclinton ipxnet fffffffe
Command> set user bclinton protocol ppp
Command> set user bclinton mtu 1500
Command> set user bclinton routing on
Command> show user bclinton

Username: bclinton Type: Dial-in Network User
Address: 0.0.0.0 Netmask: 0.0.0.0
IPX Network: FFFFFFFE
Protocol: PPP Options: Broadcast, Listen
MTU: 1500 Async Map: 00000000
Command> save all

ADDING AN IPX USER TO RADIUS:

#Sample IPX user profile from /etc/raddb/users file.
bclinton Password = "UNIX"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Address = 255.255.255.254,
Framed-Netmask = 255.255.255.255,
Framed-IPX-Network = FFFFFFFE,
Framed-Routing = Broadcast-Listen,
Framed-Compression = None,
Framed-MTU = 1500

DEBUGGING TOOLS:

If the user cannot connect try the following:

1.Setup a packet trace to trace IPX packets.
2.Watch the PPP negotiation and translate the
IPXCP packet headers.

Command> set console
Command> set debug 0x51

---
jstorms@livingston.com
So much to do, so litt...[Hold on a sec]