<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2658.34">
<TITLE>Unable to connect TCP/IP error 733</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Hi All....</FONT>
</P>
<P><FONT SIZE=2>Here's an issue I'm getting, and I seem to not be able to find any answers elsewhere on the internet.</FONT>
</P>
<P><FONT SIZE=2>We're testing currently and our client is dialing into our NAS, the NAS sends the auth. request to the RADIUS, RADIUS authenticates and returns a good request.... BUT!!!!! On the client side the connection is quickly dropped when it moves to "Registering Your Computer on The Network" and returns the error message of -Checking network protocol connections... TCP/IP CP reported error 733. A connection to the remote computer could not be completed. You might need to adjust the protocols on this computer.-</FONT></P>
<P><FONT SIZE=2>The protocol on the Client is set to PPP. When I checked out various modem sites they kept referring to problems negotiating mult-link for single link connections... That option is off by default on Windows XP (which is the client).</FONT></P>
<P><FONT SIZE=2>So I'm quite stuck, not sure exactly which way to go and what changed to make on the RADIUS side to resolve this connection issue.</FONT></P>
<BR>
<P><FONT SIZE=2>Client- Windows XP Pro</FONT>
<BR><FONT SIZE=2>NAS- Cisco AS5400</FONT>
<BR><FONT SIZE=2>Radius Server - RHEL4</FONT>
<BR><FONT SIZE=2>freeRADIUS version 1.0.1</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>Here's the debug dump. Don't know if it'll do any good, but... Hey, anything is worth a try. </FONT>
</P>
<P><FONT SIZE=2>Starting - reading configuration files ...</FONT>
<BR><FONT SIZE=2>reread_config: reading radiusd.conf</FONT>
<BR><FONT SIZE=2>Config: including file: /etc/raddb/proxy.conf</FONT>
<BR><FONT SIZE=2>Config: including file: /etc/raddb/clients.conf</FONT>
<BR><FONT SIZE=2>Config: including file: /etc/raddb/snmp.conf</FONT>
<BR><FONT SIZE=2>Config: including file: /etc/raddb/eap.conf</FONT>
<BR><FONT SIZE=2>Config: including file: /etc/raddb/sql.conf</FONT>
<BR><FONT SIZE=2> main: prefix = "/usr"</FONT>
<BR><FONT SIZE=2> main: localstatedir = "/var"</FONT>
<BR><FONT SIZE=2> main: logdir = "/var/log/radius"</FONT>
<BR><FONT SIZE=2> main: libdir = "/usr/lib"</FONT>
<BR><FONT SIZE=2> main: radacctdir = "/var/log/radius/radacct"</FONT>
<BR><FONT SIZE=2> main: hostname_lookups = no</FONT>
<BR><FONT SIZE=2> main: max_request_time = 30</FONT>
<BR><FONT SIZE=2> main: cleanup_delay = 5</FONT>
<BR><FONT SIZE=2> main: max_requests = 1024</FONT>
<BR><FONT SIZE=2> main: delete_blocked_requests = 0</FONT>
<BR><FONT SIZE=2> main: port = 0</FONT>
<BR><FONT SIZE=2> main: allow_core_dumps = no</FONT>
<BR><FONT SIZE=2> main: log_stripped_names = no</FONT>
<BR><FONT SIZE=2> main: log_file = "/var/log/radius/radius.log"</FONT>
<BR><FONT SIZE=2> main: log_auth = no</FONT>
<BR><FONT SIZE=2> main: log_auth_badpass = no</FONT>
<BR><FONT SIZE=2> main: log_auth_goodpass = no</FONT>
<BR><FONT SIZE=2> main: pidfile = "/var/run/radiusd/radiusd.pid"</FONT>
<BR><FONT SIZE=2> main: user = "radiusd"</FONT>
<BR><FONT SIZE=2> main: group = "radiusd"</FONT>
<BR><FONT SIZE=2> main: usercollide = no</FONT>
<BR><FONT SIZE=2> main: lower_user = "no"</FONT>
<BR><FONT SIZE=2> main: lower_pass = "no"</FONT>
<BR><FONT SIZE=2> main: nospace_user = "no"</FONT>
<BR><FONT SIZE=2> main: nospace_pass = "no"</FONT>
<BR><FONT SIZE=2> main: checkrad = "/usr/sbin/checkrad"</FONT>
<BR><FONT SIZE=2> main: proxy_requests = yes</FONT>
<BR><FONT SIZE=2> proxy: retry_delay = 5</FONT>
<BR><FONT SIZE=2> proxy: retry_count = 3</FONT>
<BR><FONT SIZE=2> proxy: synchronous = no</FONT>
<BR><FONT SIZE=2> proxy: default_fallback = yes</FONT>
<BR><FONT SIZE=2> proxy: dead_time = 120</FONT>
<BR><FONT SIZE=2> proxy: post_proxy_authorize = yes</FONT>
<BR><FONT SIZE=2> proxy: wake_all_if_all_dead = no</FONT>
<BR><FONT SIZE=2> security: max_attributes = 200</FONT>
<BR><FONT SIZE=2> security: reject_delay = 1</FONT>
<BR><FONT SIZE=2> security: status_server = no</FONT>
<BR><FONT SIZE=2> main: debug_level = 0</FONT>
<BR><FONT SIZE=2>read_config_files: reading dictionary</FONT>
<BR><FONT SIZE=2>read_config_files: reading naslist</FONT>
<BR><FONT SIZE=2>Using deprecated naslist file. Support for this will go away soon.</FONT>
<BR><FONT SIZE=2>read_config_files: reading clients</FONT>
<BR><FONT SIZE=2>read_config_files: reading realms</FONT>
<BR><FONT SIZE=2>radiusd: entering modules setup</FONT>
<BR><FONT SIZE=2>Module: Library search path is /usr/lib</FONT>
<BR><FONT SIZE=2>Module: Loaded exec</FONT>
<BR><FONT SIZE=2> exec: wait = yes</FONT>
<BR><FONT SIZE=2> exec: program = "(null)"</FONT>
<BR><FONT SIZE=2> exec: input_pairs = "request"</FONT>
<BR><FONT SIZE=2> exec: output_pairs = "(null)"</FONT>
<BR><FONT SIZE=2> exec: packet_type = "(null)"</FONT>
<BR><FONT SIZE=2>rlm_exec: Wait=yes but no output defined. Did you mean output=none?</FONT>
<BR><FONT SIZE=2>Module: Instantiated exec (exec)</FONT>
<BR><FONT SIZE=2>Module: Loaded expr</FONT>
<BR><FONT SIZE=2>Module: Instantiated expr (expr)</FONT>
<BR><FONT SIZE=2>Module: Loaded PAP</FONT>
<BR><FONT SIZE=2> pap: encryption_scheme = "crypt"</FONT>
<BR><FONT SIZE=2>Module: Instantiated pap (pap)</FONT>
<BR><FONT SIZE=2>Module: Loaded CHAP</FONT>
<BR><FONT SIZE=2>Module: Instantiated chap (chap)</FONT>
<BR><FONT SIZE=2>Module: Loaded MS-CHAP</FONT>
<BR><FONT SIZE=2> mschap: use_mppe = yes</FONT>
<BR><FONT SIZE=2> mschap: require_encryption = no</FONT>
<BR><FONT SIZE=2> mschap: require_strong = no</FONT>
<BR><FONT SIZE=2> mschap: with_ntdomain_hack = no</FONT>
<BR><FONT SIZE=2> mschap: passwd = "(null)"</FONT>
<BR><FONT SIZE=2> mschap: authtype = "MS-CHAP"</FONT>
<BR><FONT SIZE=2> mschap: ntlm_auth = "(null)"</FONT>
<BR><FONT SIZE=2>Module: Instantiated mschap (mschap)</FONT>
<BR><FONT SIZE=2>Module: Loaded System</FONT>
<BR><FONT SIZE=2> unix: cache = no</FONT>
<BR><FONT SIZE=2> unix: passwd = "/etc/passwd"</FONT>
<BR><FONT SIZE=2> unix: shadow = "/etc/shadow"</FONT>
<BR><FONT SIZE=2> unix: group = "/etc/group"</FONT>
<BR><FONT SIZE=2> unix: radwtmp = "/var/log/radius/radwtmp"</FONT>
<BR><FONT SIZE=2> unix: usegroup = no</FONT>
<BR><FONT SIZE=2> unix: cache_reload = 600</FONT>
<BR><FONT SIZE=2>Module: Instantiated unix (unix)</FONT>
<BR><FONT SIZE=2>Module: Loaded eap</FONT>
<BR><FONT SIZE=2> eap: default_eap_type = "md5"</FONT>
<BR><FONT SIZE=2> eap: timer_expire = 60</FONT>
<BR><FONT SIZE=2> eap: ignore_unknown_eap_types = no</FONT>
<BR><FONT SIZE=2> eap: cisco_accounting_username_bug = no</FONT>
<BR><FONT SIZE=2>rlm_eap: Loaded and initialized type md5</FONT>
<BR><FONT SIZE=2>rlm_eap: Loaded and initialized type leap</FONT>
<BR><FONT SIZE=2> gtc: challenge = "Password: "</FONT>
<BR><FONT SIZE=2> gtc: auth_type = "PAP"</FONT>
<BR><FONT SIZE=2>rlm_eap: Loaded and initialized type gtc</FONT>
<BR><FONT SIZE=2> mschapv2: with_ntdomain_hack = no</FONT>
<BR><FONT SIZE=2>rlm_eap: Loaded and initialized type mschapv2</FONT>
<BR><FONT SIZE=2>Module: Instantiated eap (eap)</FONT>
<BR><FONT SIZE=2>Module: Loaded preprocess</FONT>
<BR><FONT SIZE=2> preprocess: huntgroups = "/etc/raddb/huntgroups"</FONT>
<BR><FONT SIZE=2> preprocess: hints = "/etc/raddb/hints"</FONT>
<BR><FONT SIZE=2> preprocess: with_ascend_hack = no</FONT>
<BR><FONT SIZE=2> preprocess: ascend_channels_per_line = 23</FONT>
<BR><FONT SIZE=2> preprocess: with_ntdomain_hack = no</FONT>
<BR><FONT SIZE=2> preprocess: with_specialix_jetstream_hack = no</FONT>
<BR><FONT SIZE=2> preprocess: with_cisco_vsa_hack = no</FONT>
<BR><FONT SIZE=2>Module: Instantiated preprocess (preprocess)</FONT>
<BR><FONT SIZE=2>Module: Loaded realm</FONT>
<BR><FONT SIZE=2> realm: format = "suffix"</FONT>
<BR><FONT SIZE=2> realm: delimiter = "@"</FONT>
<BR><FONT SIZE=2> realm: ignore_default = no</FONT>
<BR><FONT SIZE=2> realm: ignore_null = no</FONT>
<BR><FONT SIZE=2>Module: Instantiated realm (suffix)</FONT>
<BR><FONT SIZE=2>Module: Loaded files</FONT>
<BR><FONT SIZE=2> files: usersfile = "/etc/raddb/users"</FONT>
<BR><FONT SIZE=2> files: acctusersfile = "/etc/raddb/acct_users"</FONT>
<BR><FONT SIZE=2> files: preproxy_usersfile =</FONT>
<BR><FONT SIZE=2>"/etc/raddb/preproxy_users"</FONT>
<BR><FONT SIZE=2> files: compat = "no"</FONT>
<BR><FONT SIZE=2>Module: Instantiated files (files)</FONT>
<BR><FONT SIZE=2>Module: Loaded Acct-Unique-Session-Id</FONT>
<BR><FONT SIZE=2> acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"</FONT>
<BR><FONT SIZE=2>Module: Instantiated acct_unique (acct_unique)</FONT>
<BR><FONT SIZE=2>Module: Loaded detail</FONT>
<BR><FONT SIZE=2> detail: detailfile =</FONT>
<BR><FONT SIZE=2>"/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"</FONT>
<BR><FONT SIZE=2> detail: detailperm = 384</FONT>
<BR><FONT SIZE=2> detail: dirperm = 493</FONT>
<BR><FONT SIZE=2> detail: locking = no</FONT>
<BR><FONT SIZE=2>Module: Instantiated detail (detail)</FONT>
<BR><FONT SIZE=2>Module: Loaded radutmp</FONT>
<BR><FONT SIZE=2> radutmp: filename = "/var/log/radius/radutmp"</FONT>
<BR><FONT SIZE=2> radutmp: username = "%{User-Name}"</FONT>
<BR><FONT SIZE=2> radutmp: case_sensitive = yes</FONT>
<BR><FONT SIZE=2> radutmp: check_with_nas = yes</FONT>
<BR><FONT SIZE=2> radutmp: perm = 384</FONT>
<BR><FONT SIZE=2> radutmp: callerid = yes</FONT>
<BR><FONT SIZE=2>Module: Instantiated radutmp (radutmp)</FONT>
<BR><FONT SIZE=2>Listening on authentication *:1812</FONT>
<BR><FONT SIZE=2>Listening on accounting *:1813</FONT>
<BR><FONT SIZE=2>Listening on proxy *:1814</FONT>
<BR><FONT SIZE=2>Ready to process requests.</FONT>
<BR><FONT SIZE=2>rad_recv: Access-Request packet from host 172.16.2.5:1645, id=115, length=100</FONT>
<BR><FONT SIZE=2> Framed-Protocol = PPP</FONT>
<BR><FONT SIZE=2> User-Name = "test"</FONT>
<BR><FONT SIZE=2> User-Password = "test"</FONT>
<BR><FONT SIZE=2> NAS-Port-Type = Async</FONT>
<BR><FONT SIZE=2> Connect-Info = "54667/24000 V90/V44/LAPM"</FONT>
<BR><FONT SIZE=2> NAS-Port = 538</FONT>
<BR><FONT SIZE=2> Service-Type = Framed-User</FONT>
<BR><FONT SIZE=2> NAS-IP-Address = 172.16.2.5</FONT>
<BR><FONT SIZE=2> Processing the authorize section of radiusd.conf</FONT>
<BR><FONT SIZE=2>modcall: entering group authorize for request 0</FONT>
<BR><FONT SIZE=2> modcall[authorize]: module "preprocess" returns ok for request 0</FONT>
<BR><FONT SIZE=2> modcall[authorize]: module "chap" returns noop for request 0</FONT>
<BR><FONT SIZE=2> modcall[authorize]: module "mschap" returns noop for request 0</FONT>
<BR><FONT SIZE=2> rlm_realm: No '@' in User-Name = "test", looking up realm NULL</FONT>
<BR><FONT SIZE=2> rlm_realm: No such realm "NULL"</FONT>
<BR><FONT SIZE=2> modcall[authorize]: module "suffix" returns noop for request 0</FONT>
<BR><FONT SIZE=2> rlm_eap: No EAP-Message, not doing EAP</FONT>
<BR><FONT SIZE=2> modcall[authorize]: module "eap" returns noop for request 0</FONT>
<BR><FONT SIZE=2> users: Matched test at 80</FONT>
<BR><FONT SIZE=2> modcall[authorize]: module "files" returns ok for request 0</FONT>
<BR><FONT SIZE=2>modcall: group authorize returns ok for request 0</FONT>
<BR><FONT SIZE=2> rad_check_password: Found Auth-Type Local</FONT>
<BR><FONT SIZE=2>auth: type Local</FONT>
<BR><FONT SIZE=2>auth: user supplied User-Password matches local User-Password Sending Access-Accept of id 115 to 172.16.2.5:1645</FONT>
<BR><FONT SIZE=2> Service-Type = Framed-User</FONT>
<BR><FONT SIZE=2> Framed-Protocol = PPP</FONT>
<BR><FONT SIZE=2> Framed-IP-Address = 172.16.2.150</FONT>
<BR><FONT SIZE=2> Framed-IP-Netmask = 255.255.255.0</FONT>
<BR><FONT SIZE=2> Framed-Routing = Broadcast-Listen</FONT>
<BR><FONT SIZE=2> Framed-Filter-Id = "std.ppp"</FONT>
<BR><FONT SIZE=2> Framed-MTU = 1500</FONT>
<BR><FONT SIZE=2> Framed-Compression = Van-Jacobson-TCP-IP Finished request 0 Going to the next request</FONT>
<BR><FONT SIZE=2>--- Walking the entire request list ---</FONT>
<BR><FONT SIZE=2>Waking up in 6 seconds...</FONT>
<BR><FONT SIZE=2>--- Walking the entire request list ---</FONT>
<BR><FONT SIZE=2>Cleaning up request 0 ID 115 with timestamp 43e171f9 Nothing to do. Sleeping until we see a request.</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>Regards,</FONT>
</P>
<BR>
<P><FONT SIZE=2>David Galloway</FONT>
<BR><FONT SIZE=2>Public Networks Administration</FONT>
<BR><FONT SIZE=2>KRS IT Network Operations</FONT>
<BR><FONT SIZE=2>Help Desk (805) 355-2444</FONT>
<BR><FONT SIZE=2>Direct (805) 355-4512</FONT>
<BR><FONT SIZE=2>+12Hrs GMT</FONT>
</P>
</BODY>
</HTML>