<html>
<body>
FreeRadius experts,<br>
Ok, I ran radtest on both the old Lucent technology radius server
and on Freeradius with the following results:<br><br>
Lucent Technology radius server (which works)<br>
[root@alum raddb]# radtest tylert xxxxxx 144.89.40.30:1645
1645 yyyyyy<br>
Sending Access-Request of id 37 to 144.89.40.30:1645<br>
User-Name =
"tylert"<br>
User-Password =
"xxxxxx"<br>
NAS-IP-Address =
alum.beloit.edu<br>
NAS-Port = 1645<br>
rad_recv: Access-Accept packet from host 144.89.40.30:1645, id=37,
length=44<br>
Framed-Protocol = PPP<br>
Service-Type =
Framed-User<br>
Framed-IP-Address =
255.255.255.254<br>
Framed-MTU = 1500<br><br>
FreeRadius which authenticates, access the local network, but doesn't
access the Internet:<br>
[root@alum raddb]# radtest tylert xxxxxx 144.89.40.9 1812 yyyyyyy<br>
Sending Access-Request of id 159 to 144.89.40.9:1812<br>
User-Name =
"tylert"<br>
User-Password =
"xxxxxx"<br>
NAS-IP-Address =
alu.beloit.edu<br>
NAS-Port = 1812<br>
rad_recv: Access-Accept packet from host 144.89.40.9:1812, id=159,
length=20<br><br>
<br>
So what I am observing is that Freeradius does not send back the
following information that Lucent Tech. does.<br><br>
Framed-Protocol = PPP<br>
Service-Type =
Framed-User<br>
Framed-IP-Address =
255.255.255.254<br>
Framed-MTU = 1500<br><br>
I am guessing that some or all of these are important. Some of the
old archives have suggested that the mtu might be important. If I
am using a standard unix password crypt file, is it possible to get
freeradius to send this information? Or do I need to consider
another method?<br>
Tim<br><br>
At 11:54 AM 1/8/2007, you wrote:<br>
<blockquote type=cite class=cite cite="">You may wish to use the
radius-tools package (correct me if the package name is wrong, List)
which is included with freeradius to send test packets from the test
application to the Freeradius server, and it'll show you what the
attributes you're sending and what the server replies with. <br>
<br>
You can then do this again to your AIX server and see how the response is
different - this will involve adding your test client machine as a NAS in
the AIX machine's clients file.<br>
<br>
Basically you need to eavesdrop on the connection between the radius
client and new/old servers, and compare and contrast the replies. This is
the best way to work out "What has changed?"<br>
<br>
Hope this helps,<br>
<br>
Jan<br><br>
<br>
On 08/01/07, <b>Tim Tyler</b>
<<a href="mailto:tyler@beloit.edu">tyler@beloit.edu</a>> wrote:
<br>
<dl>
<dd>FreeRadius experts,<br>
<dd> We are trying to run FreeRadius on a RedHat AS 2.1
system. We use<br>
<dd>an external password file for authentication defined in the unix
<br>
<dd>system (password = filename) section of radius.conf. This seems
to<br>
<dd>work fine. Modem users can authenticate to our old 3com
Total<br>
<dd>Control modem pool, but users can not access the Internet. They
can<br>
<dd>access all local domain servers on campus, but they can't get off
<br>
<dd>campus. This really should not be a firewall issue as the
same ip<br>
<dd>addresses are still associated with the modem pool.<br>
<dd> Note: if we go back to our old Lucent Technology radius
server<br>
<dd>running on AIX, everybody is fine and can access the Internet again.
<br>
<dd> I am trying to find out what might cause a modem pool to only
work<br>
<dd>locally (access servers on our campus) after switching to
FreeRadius<br>
<dd>particularly since it seems that the authentication part is<br>
<dd>working? I know that the 3com Total Control modem pool is
rather old <br>
<dd>but I don't know why it would behave differently from one radius<br>
<dd>server to another as long as authentication works.<br>
<dd> I read in one of the FreeRadius archives that some users
have<br>
<dd>experienced a similar problem of either very slow or won't work at
<br>
<dd>all for some customers accessing the Internet via Freeradius<br>
<dd>authentication until they modified the MTU setting. This is
curious<br>
<dd>to me. Is there a place in FreeRadius that I might change the
mtu<br>
<dd>setting given that I am using an external unix password crypt file
<br>
<dd>for all authentication? If so, what mtu setting might be
recommended?<br>
<dd> Is there another possible explanation that might relate to
Freeradius?<br>
<dd>any thoughts are much appreciated?<br><br>
<br><br>
<dd>Tim Tyler<br>
<dd>Network Engineer - Beloit College <br>
<dd><a href="mailto:tyler@beloit.edu">tyler@beloit.edu</a><br><br>
<br>
<dd>-<br>
<dd>List info/subscribe/unsubscribe? See
<a href="http://www.freeradius.org/list/users.html">
http://www.freeradius.org/list/users.html</a><br><br>
</dl><br>
- <br>
List info/subscribe/unsubscribe? See
<a href="http://www.freeradius.org/list/users.html" eudora="autourl">
http://www.freeradius.org/list/users.html</a></blockquote>
<x-sigsep><p></x-sigsep>
Tim Tyler<br>
Network Engineer - Beloit College<br>
tyler@beloit.edu</body>
</html>