Hi all, Here we have a TNT with which we want to assign a special profile (to its users) during authorization. Basically we have it set up for Radius authentication and in the Access-Accept we want to set the DNS servers to the user. I know this is done via attribs 135, 136 and 137 and I think the Radius server is telling it right to the TNT, but then the user doesn't get its DNS addresses at all. Follows relevant Radius traffic dumped from a testbed. Here "zorro" is the Radius server: 15:46:16.960659 tnt-madero.7021 > zorro.1700: Access-Request ID: 39 PLen: 128 User-Name [1] Len:15 "inv%corp-user" User-Password [2] Len:18 b4 a3 43 c1 fb d4 e0 4f b2 34 b7 ad bd 4a 8c 97 NAS-IP-Address [4] Len:6 126.1.1.35 NAS-Port [5] Len:6 1043 NAS-Port-Type [61] Len:6 Async [0] Service-Type [6] Len:6 Framed [2] Framed-Protocol [7] Len:6 PPP [1] Called-Station-Id [30] Len:9 "5093435" Acct-Session-Id [44] Len:12 "364305931" (null terminated) Ascend-Data-Rate [26,529,197] Len:12/6 24000 Ascend-Xmit-Rate [26,529,255] Len:12/6 46667 15:46:17.030258 zorro.1700 > tnt-madero.7021: Access-Accept ID: 39 PLen: 59 Class [25] Len:6 80 b5 80 80 Framed-Protocol [7] Len:6 PPP [1] Service-Type [6] Len:6 Framed [2] Ascend-Client-Primary-DNS [26,529,135] Len:12/6 5.5.5.5 Ascend-Client-Assign-DNS [26,529,137] Len:9/3 Yes It looks right to me. How can I debug in the TNT what is happening to this transaction? (what I'm looking is something similar to Cisco's "debug aaa authorization" command) any comments appreciated cl. _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com Archives: http://www.nexial.com/mailinglists/