I would like to be able to do CHAP authentication for callers with specific profiles either local or in Radius and still be able to do PAP for everyone else (so I can use password="UNIX" in my Radius DEFAULT). I believe I can't do this because the type of authentication is negotiated before the NAS knows the caller's name and therefore before it can know whether there is a profile or not. If I could convince all unprofiled callers to reject CHAP, it would work. Since that's not likely my only option is to to have the Max ask only for PAP. Anyone disagree? ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.shore.net/~dreaming/ascend-faq">http://www.shore.net/~dreaming/ascend-faq</A>> or <<A HREF="ftp://ftp.shore.net/members/dreaming/ascend-faq.txt">ftp://ftp.shore.net/members/dreaming/ascend-faq.txt</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <!--X-Follow-Ups-End--> <!--X-References--> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg00782.html">Re: (ASCEND) 56K Modem Throughput Degradation</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg00765.html">Re: (ASCEND) 56K Modem Throughput Degradation</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg00833.html">Re: (ASCEND) Software for a pipeline 400</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg00783.html">(ASCEND) Immediate Rlogin</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="mail3.html#00779"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd31.html#00779"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>