<br><font size=2 face="sans-serif">Greetings,</font>
<br>
<br><font size=2 face="sans-serif">We are receiving the attached information
from a Nokia IP 260 Firewall and VPN appliance,</font>
<br>
<br><font size=2 face="sans-serif">The Access-Request is processed by a
Perl program (through rlm_perl), and AR::RADIUSRequest is the class of
objects that represent a generic RADIUS packet (don't mind the empty attributes).</font>
<br>
<br><font size=2 face="sans-serif">The password sent is 'AAAAAAAA' but
we just get gibberish on our end (and the tethereal capture also looks
weird). The VPN is using PAP, as we are. Any hints on what can be wrong?
(shared key is okay on both sides, and no other NAS is doing this weird
thing). I'm thinking in some configuration options that may be hurting
with this NAS, but, frankly...</font>
<br>
<br><font size=2 face="sans-serif">Server is 1.1.3 on a Debian 3.1 intel
box.</font>
<br>
<br><font size=2 face="sans-serif">Thanks for any help</font>
<br><font size=2 face="sans-serif">david</font>
<br>
<br><font size=2 face="sans-serif">PS- tethereal capture:</font>
<br>
<br><font size=2 face="sans-serif">Frame 4 (101 bytes on wire, 101 bytes
captured)</font>
<br><font size=2 face="sans-serif"> Arrival Time: Jun 21,
2007 10:32:18.545587000</font>
<br><font size=2 face="sans-serif"> Time delta from previous
packet: 5.050255000 seconds</font>
<br><font size=2 face="sans-serif"> Time since reference or
first frame: 10.108408000 seconds</font>
<br><font size=2 face="sans-serif"> Frame Number: 4</font>
<br><font size=2 face="sans-serif"> Packet Length: 101 bytes</font>
<br><font size=2 face="sans-serif"> Capture Length: 101 bytes</font>
<br><font size=2 face="sans-serif"> Protocols in frame: eth:ip:udp:radius</font>
<br><font size=2 face="sans-serif">Ethernet II, Src: 00:17:cb:5a:81:7e,
Dst: 00:11:0a:2f:61:3b</font>
<br><font size=2 face="sans-serif"> Destination: 00:11:0a:2f:61:3b
(HewlettP_2f:61:3b)</font>
<br><font size=2 face="sans-serif"> Source: 00:17:cb:5a:81:7e
(00:17:cb:5a:81:7e)</font>
<br><font size=2 face="sans-serif"> Type: IP (0x0800)</font>
<br><font size=2 face="sans-serif">Internet Protocol, Src Addr: 10.235.236.14
(10.235.236.14), Dst Addr: 10.235.244.133 (10.235.244.133)</font>
<br><font size=2 face="sans-serif"> Version: 4</font>
<br><font size=2 face="sans-serif"> Header length: 20 bytes</font>
<br><font size=2 face="sans-serif"> Differentiated Services
Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)</font>
<br><font size=2 face="sans-serif"> 0000 00..
= Differentiated Services Codepoint: Default (0x00)</font>
<br><font size=2 face="sans-serif"> .... ..0.
= ECN-Capable Transport (ECT): 0</font>
<br><font size=2 face="sans-serif"> .... ...0
= ECN-CE: 0</font>
<br><font size=2 face="sans-serif"> Total Length: 87</font>
<br><font size=2 face="sans-serif"> Identification: 0x79dc
(31196)</font>
<br><font size=2 face="sans-serif"> Flags: 0x00</font>
<br><font size=2 face="sans-serif"> 0... = Reserved
bit: Not set</font>
<br><font size=2 face="sans-serif"> .0.. = Don't
fragment: Not set</font>
<br><font size=2 face="sans-serif"> ..0. = More
fragments: Not set</font>
<br><font size=2 face="sans-serif"> Fragment offset: 0</font>
<br><font size=2 face="sans-serif"> Time to live: 55</font>
<br><font size=2 face="sans-serif"> Protocol: UDP (0x11)</font>
<br><font size=2 face="sans-serif"> Header checksum: 0x1350
(correct)</font>
<br><font size=2 face="sans-serif"> Source: 10.235.236.14
(10.235.236.14)</font>
<br><font size=2 face="sans-serif"> Destination: 10.235.244.133
(10.235.244.133)</font>
<br><font size=2 face="sans-serif">User Datagram Protocol, Src Port: 2305
(2305), Dst Port: radius (1812)</font>
<br><font size=2 face="sans-serif"> Source port: 2305 (2305)</font>
<br><font size=2 face="sans-serif"> Destination port: radius
(1812)</font>
<br><font size=2 face="sans-serif"> Length: 67</font>
<br><font size=2 face="sans-serif"> Checksum: 0xa4c4 (correct)</font>
<br><font size=2 face="sans-serif">Radius Protocol</font>
<br><font size=2 face="sans-serif"> Code: Access Request (1)</font>
<br><font size=2 face="sans-serif"> Packet identifier: 0x41
(65)</font>
<br><font size=2 face="sans-serif"> Length: 59</font>
<br><font size=2 face="sans-serif"> Authenticator: 0x9FE8712917FDD893EF8E416B424D0E89</font>
<br><font size=2 face="sans-serif"> Attribute value pairs</font>
<br><font size=2 face="sans-serif"> t:User Name(1)
l:9, Value:"user1"</font>
<br><font size=2 face="sans-serif">
User-Name: un41814</font>
<br><font size=2 face="sans-serif"> t:User Password(2)
l:18, Value:A0EB498C3FAD6541B06C0785F76F04C2</font>
<br><font size=2 face="sans-serif"> t:Service
Type(6) l:6, Value:Login(1)</font>
<br><font size=2 face="sans-serif">
Service-Type: Login (1)</font>
<br><font size=2 face="sans-serif"> t:NAS IP
Address(4) l:6, Value: xxx.xxx.xxx.xxx</font>
<br><font size=2 face="sans-serif">
Nas IP Address: xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx)</font>
<br>
<br><font size=2 face="sans-serif">PPS- Perl Data::Dumper dump:</font>
<br>
<br><font size=2 face="sans-serif">User-Password = 'AAAAAAAA'</font>
<br>
<br><font size=2 face="sans-serif">
'REQUEST' => bless( {</font>
<br><font size=2 face="sans-serif">
'MODIFICATION_TIME' => '1182414728.493002',</font>
<br><font size=2 face="sans-serif">
'ATTR' => {</font>
<br><font size=2 face="sans-serif">
'Acct-Input-Octets'
=> '',</font>
<br><font size=2 face="sans-serif">
'NAS-Port-Type'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Session-Id'
=> '',</font>
<br><font size=2 face="sans-serif">
'Service-Type'
=> 'Login-User',</font>
<br><font size=2 face="sans-serif">
'Called-Station-Id'
=> '',</font>
<br><font size=2 face="sans-serif">
'Client-IP-Address'
=> '10.235.236.14',</font>
<br><font size=2 face="sans-serif">
'Tunnel-Client-Endpoint'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Authentic'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Status-Type'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Output-Packets'
=> '',</font>
<br><font size=2 face="sans-serif">
'NAS-IP-Address'
=> 'xxx.xxx.xxx.xxx',</font>
<br><font size=2 face="sans-serif">
'Acct-Output-Octets'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Tunnel-Client-Endpoint:0'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Terminate-Cause'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Session-Time'
=> '',</font>
<br><font size=2 face="sans-serif">
'Calling-Station-Id'
=> '',</font>
<br><font size=2 face="sans-serif">
'Framed-Protocol'
=> '',</font>
<br><font size=2 face="sans-serif">
'User-Name'
=> 'user1',</font>
<br><font size=2 face="sans-serif">
'User-Password'
=> 'x\\264\\343\\023y\\232\\004\\211\\357\\333\\010\\214\\2163U\\217',</font>
<br><font size=2 face="sans-serif">
'Tunnel-Client-Endpoint:0'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Input-Packets'
=> '',</font>
<br><font size=2 face="sans-serif">
'Framed-IP-Address'
=> '',</font>
<br><font size=2 face="sans-serif">
'Class' =>
'',</font>
<br><font size=2 face="sans-serif">
'NAS-Port'
=> '',</font>
<br><font size=2 face="sans-serif">
'Acct-Delay-Time'
=> ''</font>
<br><font size=2 face="sans-serif">
},</font>
<br><font size=2 face="sans-serif">
'CREATION_TIME' => '1182414728.493002'</font>
<br><font size=2 face="sans-serif">
}, 'AR::RADIUSRequest' ),</font>