<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="metricconverter"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EstiloCorreo17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=ES link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>Hello,</span></font><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span lang=EN-US
style='font-size:12.0pt'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>I am trying to implement
a Nomadix AG-5000 public NAS in a in a network with an existing FreeRADIUS
server. </span></font><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>The environment is as
follows:</span></font><o:p></o:p></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'> <o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'><font size=2
color=blue face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial;color:blue'>-</span></font><font size=1 color=blue><span lang=EN-US
style='font-size:7.0pt;color:blue'>
</span></font><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>The customer wants
nomadix to make public authentication (with captive portal and
PAP) for guest users, and employees who can’t use the protected
wireless network working with WPA-Enterprise authentication.<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'><font size=2
color=blue face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial;color:blue'>-</span></font><font size=1 color=blue><span lang=EN-US
style='font-size:7.0pt;color:blue'> </span></font><font
size=2 color=blue face=Arial><span lang=EN-US style='font-size:10.0pt;
font-family:Arial;color:blue'>The employees´ user names and passwords are
stored in a LDAP structure.<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'><font size=2
color=blue face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial;color:blue'>-</span></font><font size=1 color=blue><span lang=EN-US
style='font-size:7.0pt;color:blue'>
</span></font><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>There is a freeRADIUS v
1.0.5 server which asks that LDAP structure for authentication.</span></font><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'> </span></font><font
size=2 color=blue face=Arial><span lang=EN-US style='font-size:10.0pt;
font-family:Arial;color:blue'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>So the Nomadix is
configured as RADIUS client, connected to the FreeRADIUS server. I have
tested the connection with test users stored in freeRADIUS´ “users”
file, and everything worked fine. The problem starts with the Access-Accept
RADIUS message. This message includes some tunnel attributes stored in the
LDAP, which are necessary for the other networks to work properly. But the
Nomadix does not understand those attributes and drops the Access-Accept
messages, resulting in a</span></font><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>failed authentication.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>The solution I’m
thinking about is to remove this tunnel atributes of the Access-Accept
message should they be sent to the Nomadix. I’ve read about
rlm_attr_filter, but I don’t know how to configure it to remove tunnel
attribures should the Nomadix be acting as the NAS.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>File /etc/raddb/attrs:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>DEFAULT<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>
Packet-type =* ANY,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>
EAP-Message =* ANY,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>
User-Name =* ANY,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>
Message-Authenticator =* ANY,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>
State =* ANY,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>
</span></font><font size=2 color=blue face=Arial><span lang=NL
style='font-size:10.0pt;font-family:Arial;color:blue'>Tunnel-Type := VLAN,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=NL
style='font-size:10.0pt;font-family:Arial;color:blue'>
Tunnel-Medium-Type := IEEE-802<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=NL
style='font-size:10.0pt;font-family:Arial;color:blue'>
</span></font><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>Tunnel-Private-Group-Id
:= “<st1:metricconverter ProductID="55”" w:st="on">55”</st1:metricconverter><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:blue'>Thank you in advance,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-US style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-US style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=1 face=Verdana><span style='font-size:7.5pt;
font-family:Verdana'>Ignacio Siles</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><em><i><font size=1 face=Verdana><span style='font-size:
7.5pt;font-family:Verdana'>Ingeniero de Telecomunicaciones</span></font></i></em><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><strong><b><font size=1 color=blue face=Verdana><span
style='font-size:7.5pt;font-family:Verdana;color:blue'>Libera Networks</span></font></b></strong><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 face=Verdana><span style='font-size:7.5pt;
font-family:Verdana'>Avda. Juan López Peñalver, 21. PTA</span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 face=Verdana><span style='font-size:7.5pt;
font-family:Verdana'>29590 Campanillas (MÁLAGA)</span></font><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 face=Verdana><span lang=DE style='font-size:
7.5pt;font-family:Verdana'>T: +34 951010529 - F: +34 951010542</span></font><font
size=2 face=Arial><span lang=DE style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 face=Verdana><span style='font-size:7.5pt;
font-family:Verdana'><a href="mailto:ignacio.siles@libera.net"><span lang=DE>ignacio.siles@libera.net</span></a></span></font><font
size=2 face=Arial><span lang=DE style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 face=Verdana><span style='font-size:7.5pt;
font-family:Verdana'><a href="blocked::http://www.libera.net/"
title="blocked::http://www.libera.net/
http://www.libera.net/">www.libera.net</a></span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>