It is possible by setting telnet to use 'auth-settings' instead of 'global'. Auth settings will use the current primary active external authenticator that you have specified in 'external-auth', auth-type. You could do proxy radius to separate dialin and network users. Dialin users would use a delimiting character and be proxied to another realm for authentication based on the realm they specify (eg. 'user at realm1'). Telnet users can authenticate using the local RADIUS server only, if you want, by not specifying a realm as part of their username when logging in. (eg 'user') There may be other ways but this is the first to come to mind. David Pascarella CCNP MCSE LCTE A+ Network Support Engineer SOLUServe TAC 1571 Robert J. Conlan Blvd., Suite 110 Palm Bay, FL 32905-3562 888.449.5766 800.795.2814 fax: 321.308.7986 mailto:dpascarella at solunet.com www.solunet.com -----Original Message----- From: Dave Montgomery [mailto:montgomd at corp.earthlink.net] Sent: Wednesday, August 21, 2002 6:19 PM To: ascend-users at bungi.com Subject: [Ascend] (ASCEND) Telnet login authentication via RADIUS? It looks like it's possible from the docs but I can't quite see the solution: With regards to TNT's and APX's, How can I specify that telnet sessions should be authenticated via RADIUS? Also, is there a way to specify this server indepently of the one used by dialup subscibers (ie, telnet users authenticate on RADIUS server A and dialup users authenticate on RADIUS server B). Thanks. ---Dave ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com Archives: http://www.nexial.com/mailinglists/ _______________________________________________ rte-ascend mailing list rte-ascend at lists.real-time.com https://mailman.real-time.com/mailman/listinfo/rte-ascend ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com Archives: http://www.nexial.com/mailinglists/