ICMP 435 Destination unreachable (Communication administratively filtered)

Matthew Newton mcn at freeradius.org
Wed Aug 11 12:16:16 CEST 2021


On 11/08/2021 10:50, Dennis Schneck wrote:
> if the Switch sends requests can see only in wireshark this: ICMP 435 
> Destination unreachable (Communication administratively filtered)
> 
> $ tshark -Y "ip.addr==192.168.1.0/24"
> Capturing on 'eth0'
>    109 12.985452883   192.168.1.78 → 172.16.1.28 RADIUS 407 
> Access-Request id=5
>    110 12.985550915 172.16.1.28 → 192.168.1.78   ICMP 435 Destination 
> unreachable (Communication administratively filtered)
...
> but in debug mode (raduisd -X) can see nothing.

> What did I wrong ?

Firewall ("administratively filtered"), likely on the RADIUS server.

> If I dow a local test with radtest I can see there something
> 
> radtest <PC MAC Address> none localhost 10 testing123

The firewall isn't blocking the RADIUS server talking to itself.

-- 
Matthew


More information about the Freeradius-Users mailing list