<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content=text/html;charset=ISO-8859-1>
<META content="MSHTML 6.00.2900.2668" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I think you haven't put the NAS ip address in
clients.conf.</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=Rafael.DiazMaurin@cnrs-bellevue.fr
href="mailto:Rafael.DiazMaurin@cnrs-bellevue.fr">Rafael DiazMaurin</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=z.ori@morehead-st.edu
href="mailto:z.ori@morehead-st.edu">z.ori@morehead-st.edu</A> ; <A
title=freeradius-users@lists.freeradius.org
href="mailto:freeradius-users@lists.freeradius.org">FreeRadius users mailing
list</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, August 08, 2005 22:44</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: Pb with EAP/MD5</DIV>
<DIV><BR></DIV>Thank you Zoltan,<BR>I made some modification but nothing
changed.<BR>When I tested the configuration from with radping on the
supplicant, it worked fine.<BR>But with my configuration md5, nothing occures
at the radius server (no packets sent, no logs).<BR><BR>I answer you at each
point, and give the configurations on the client.<BR><BR><BR>Zoltan A. Ori a
écrit :
<BLOCKQUOTE cite=mid200508080542.30995.z.ori@morehead-st.edu type="cite"><PRE wrap="">On Monday 08 August 2005 03:54, Rafael DiazMaurin wrote:
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">Hello,
Cna someone help me ?
I use : freeradius 1.0.4, and a switch CISCO 2950
I'm trying to configure EAP/MD5, but the client can't show the window of
login/password, it's connected to the network without asking for the
login/password, and the freeradius daemon is still :
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.
A part of the log of the freeradius :
Module: Loaded eap
eap: default_eap_type = "md5"
eap: timer_expire = 60
eap: ignore_unknown_eap_types = yes
eap: cisco_accounting_username_bug = no
rlm_eap: Loaded and initialized type md5
Module: Instantiated eap (eap)
</PRE></BLOCKQUOTE><PRE wrap=""><!---->
The Cisco 2950 is the client (or NAS). Is it configured?
</PRE></BLOCKQUOTE>Yes it's configured :<BR>IOS version :
12.1(22)EA4<BR>General configuration : <BR> aaa
new-model<BR> aaa authentication dot1x default group
radius<BR> aaa authorization network default group
radius<BR>radius-server host IP-Adress auth-port 1812 acct-port 1813 key
XXX<BR>radius-server retransmit 3<BR><BR>Here is the configuration of the port
where the Supplicant (XP SP 2) is connected : <BR>interface
FastEthernet0/2<BR> description supplicant<BR> switchport access
vlan XXX<BR> switchport mode access<BR> duplex full<BR> dot1x
port-control auto<BR> dot1x timeout reauth-period 300<BR> dot1x
reauthentication<BR> spanning-tree portfast<BR><BR>This switch is
connected to another switch with a Trunk link, and another trunk link until
the radius server.<BR>Here is the configuration of the port where the radius
server is connected :<BR>interface FastEthernet2/11<BR> description
RadiusServer<BR> switchport access vlan 260<BR><BR><BR>Do I need to
configure the 2 last switchs with authentification dot1x ? <BR>I didn't
configure anything on these switch, even the one where the radius server is
plugged.<BR>I only configure the switch where the supplicant is
conected.<BR><BR>
<BLOCKQUOTE cite=mid200508080542.30995.z.ori@morehead-st.edu type="cite"><PRE wrap="">XP is the supplicant. If the Cisco 2950 (client) doesn't require login, then
the supplicant will simply connect without any authentication dialog.
</PRE></BLOCKQUOTE>How can I make the connection of the supplicant with an
authentification dialog ?<BR><BR>
<BLOCKQUOTE cite=mid200508080542.30995.z.ori@morehead-st.edu type="cite"><PRE wrap=""> </PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">The local tests are ok !
</PRE></BLOCKQUOTE><PRE wrap=""><!---->
Then server is probably working just fine.
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">Here is the configurations I tested :
raddb/users :
test Auth-Type := EAP, User-Password == "test"
Service-Type = Framed-User
</PRE></BLOCKQUOTE><PRE wrap=""><!---->
Don't set the Auth-Type in users file.
</PRE></BLOCKQUOTE>I deleted it, but nothing changed.<BR><BR>
<BLOCKQUOTE cite=mid200508080542.30995.z.ori@morehead-st.edu type="cite"><PRE wrap=""></PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">On the client (windows XP sp2) I configure the 802.1x properties on Type
EAP : MD5-Challenge
</PRE></BLOCKQUOTE><PRE wrap=""><!---->
That is the supplicant. Now, configure the client.
Zoltan
-
List info/subscribe/unsubscribe? See <A class=moz-txt-link-freetext href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A>
</PRE></BLOCKQUOTE><BR>Rafael.<BR>
<P>
<HR>
<P></P>- <BR>List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html</BLOCKQUOTE></BODY></HTML>