Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Ascend Radius



> > > To my surprise, not only does the Max authenticate OK, but the logs it 
> > > creates look identical to before.
> >
> > It is not that surprising - RADIUS as a protocol is fairly good at
> > being interoperable - you can use Ascend RADIUS with other vendors
> > equipment and other RADIUS servers with Ascend equipment.
> 
> That's not exactly true. Ascends free radius-server is NOT Multi-Vendor.
> The Merit is not yet, but it has Ascend-specific attributes built in.
> AFAIK none of the other third-party servers do support these.

I am not sure what you mean by "NOT Multi-Vendor" but I can assure you
that it works with Livingston and 3Com/USRobotics just fine.  It does
not support the Vendor-Specific attribute (26) but it works with multiple
vendors using normal attributes without problems.

If you are just talking about the Ascend specific attributes - they are
trivial to add to most other third-party RADIUS servers.  This is why
the dictionary is typically a separate configuration file.

> > > So what exactly _is_ different between Ascend radius and off the shelf??
> >
> > I don't know if this is exact but as far as I know the differences between
> > Ascend RADIUS and Merit RADIUS are a number of Ascend specific features or
> > features that require third-party help - global ip address pools (radipad),
> > ARAP authentication, password expiration and changing, Security Dynamics ACE
> > client with CACHE-TOKEN and PAP-TOKEN-CHAP support, and Ascend packet
> > filters.
> 
> In fact these Ascend-specific attributes are included in the Merit-RADIUS.
> I think those Merit-guys wanted to do us a favor ...

The features I listed are not in Merit RADIUS 2.x and are more than just
Ascend specific attributes.  Merit was trying to help out - a number of
the people using the Merit RADIUS 2.x server are using Ascend equipment.
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>