<div>Hi, Everyone,</div>
<div> </div>
<div>Thanks for helping. I think I find out the problem. The damn Firewall is running automatically with the system.</div>
<div>After I disable it, RADIUS starts responding. </div>
<div> </div>
<div>So, although I can see the request packet arrived at the interface and port from tcpdum command, it doesn't mean the RADIUS server see the packet. </div>
<div> </div>
<div>Thanks again!</div>
<div>BR</div>
<div>Richard<br><br> </div>
<div><span class="gmail_quote">On 10/26/06, <b class="gmail_sendername">Hernan Antolini</b> <<a href="mailto:antolini@ar.ibm.com">antolini@ar.ibm.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><br><font face="sans-serif" size="2">Richard, to be sure about the packet arriving at the radius machine and see the content of the packet you can use "netcat".
</font> <br><font face="sans-serif" size="2">@radius-server : nc -l -u -p 1812 -vv -o /tmp/dump_hex_packet (will use UDP and dump hex info)</font> <br><font face="sans-serif" size="2">@client_machine : radtest as usual</font>
<br><br><font face="sans-serif" size="2">hope it helps</font> <br><br><tt><font size="2">freeradius-users-bounces+antolini=<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:ar.ibm.com@lists.freeradius.org" target="_blank">
ar.ibm.com@lists.freeradius.org</a> wrote on 10/26/2006 09:29:27 AM:<br><br>> Hi, </font></tt>
<div><span class="e" id="q_10e84d3aca297236_1"><br><tt><font size="2">> </font></tt> <br><tt><font size="2">> Actually, the 0 in the radtest command means NAS-Port. Since 1812 is<br>> the default port for radius defined in /etc/service, the Access-
<br>> Request is always sent to port 1812.</font></tt> <br><tt><font size="2">> I can see the same messege as follow when I type both 0 or 1812:</font></tt> <br><tt><font size="2">> Sending Access-Request of id 40 to IP of server port 1812
</font></tt> <br><tt><font size="2">> User-Name = "username"</font></tt> <br><tt><font size="2">> User-Password = "password"</font></tt> <br><tt>
<font size="2">> NAS-IP-Address = <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.255.255/" target="_blank">255.255.255.255</a></font></tt> <br><tt><font size="2">
> NAS-Port = 0/1812 (According to the number<br>> typed in radtest command)</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> Now, I am not sure wether the RADIUS server receives the Access-
<br>> Request from the client or not. As I said, I can see the packet <br>> arrives at the interface and port of the server, but no information <br>> printed out in RADIUS debug mode. </font></tt><br><tt><font size="2">
> And the local test just works fine.</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> Thanks!</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> BR</font>
</tt> <br><tt><font size="2">> Richard</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> <br>> <br>> </font></tt> <br><tt><font size="2">> On 10/26/06, Vasea Marii <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:vascim@yahoo.com" target="_blank">
vascim@yahoo.com</a>> wrote: </font></tt><br><tt><font size="2">> I guess you didn't type " radtest username password localhost 0 <br>> sharedsecret" but " radtest username password localhost 1812
<br>> sharedsecret" why send it to the port 0? </font></tt><br><tt><font size="2">> <br>> <br>> richard Bai <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:baixin@gmail.com" target="_blank">
baixin@gmail.com</a>> wrote: </font></tt><br><tt><font size="2">> <br></font></tt><br><tt><font size="2">> Hi, everyone,</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> I face a very strange problem right now when I configure a
<br>> freeradius server with PEAP + LDAP.</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> I can start the radius in debug mode properly. I get following lines:</font></tt> <br><tt><font size="2">
> Listening on authentication *:1812</font></tt> <br><tt><font size="2">> Listening on accounting *:1813</font></tt> <br><tt><font size="2">> Ready to process requests.</font></tt> <br><tt><font size="2">> </font>
</tt> <br><tt><font size="2">> Then I did test by using " radtest username password localhost 0 sharedsecret"</font></tt> <br><tt><font size="2">> And the radius server replied with Access-Accept message. So, I
<br>> think the serve works just fine.</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> But when I tested by using "radtest username password IP of server 0<br>> sharedsecret" from a client conneted to the server through a hub, I
<br>> can not get anything back.</font></tt> <br><tt><font size="2">> I even did not see any Access-Request information in debug mode on <br>> the radius server. It looks like the radius doesn't receive anything.
</font></tt> <br><tt><font size="2">> However, I sniffered the interface via Ethereal and used " tcpdump -<br>> v port 1812 " in the server, I do see the Access-Request packet <br>> received by the interface on the server,
</font></tt><br><tt><font size="2">> I confirmed that the 1812 port is open. </font></tt><br><tt><font size="2">> </font></tt> <br><tt><font size="2">> Please give me some idea. Any advices or solution is welcome.
</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> Thank you very much!</font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">> </font></tt> <br><tt><font size="2">
> </font></tt> <br><tt><font size="2">> Best Regards</font></tt> <br><tt><font size="2">> Richard</font></tt> <br><tt><font size="2">> - <br>> List info/subscribe/unsubscribe? See <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.freeradius/" target="_blank">
http://www.freeradius</a>.<br>> org/list/users.html </font></tt><br><tt><font size="2">> <br>> Get your own web address for just $1.99/1st yr. We'll help. Yahoo! <br>> Small Business . </font></tt><br><tt><font size="2">
> <br>> -<br>> List info/subscribe/unsubscribe? See <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.freeradius/" target="_blank">http://www.freeradius</a>.<br>> org/list/users.html <br>
</font></tt><br></span></div>
<div><span class="e" id="q_10e84d3aca297236_2"><tt><font size="2">> - <br>> List info/subscribe/unsubscribe? See <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.freeradius.org/list/users.html" target="_blank">
http://www.freeradius.org/list/users.html</a></font></tt> </span></div><br>-<br>List info/subscribe/unsubscribe? See <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.freeradius.org/list/users.html" target="_blank">
http://www.freeradius.org/list/users.html</a><br><br></blockquote></div><br>