<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi, thanks for your help till now.<br>
I was on vacation and today i tried again to resolve the issue between
the FreeRadius and ASN-GW<br>
At the section post-auth of the file raddb/sites-enabled/default i put
the next lines<br>
update "reply"{<br>
WiMAX-MN-NAI = "%{User-Name}"<br>
WiMAX-IP-Technology = "CMIP4"<br>
WiMAX-hHA-IP-MIP4 = "192.168.10.3"<br>
}<br>
wimax<br>
update "reply"{<br>
WiMAX-MSK = "%{EAP-MSK}"<br>
}<br>
<br>
Now i don't have warnings (Mobile IP keys are generated normally) but
WIMAX-MSK is not 64 bytes again..<br>
Below is the log from radiusd -X<br>
<br>
Going to the next request<br>
Waking up in 2.5 seconds.<br>
rad_recv: Access-Request packet from host 192.168.10.3 port 1812, id=7,
length=208<br>
User-Name = <a class="moz-txt-link-rfc2396E" href="mailto:{am=1}anonymous@wintegra.com">"{am=1}anonymous@wintegra.com"</a><br>
EAP-Message = 0x020700061500<br>
Message-Authenticator = 0x376c02573adcce4466d564295fd56891<br>
NAS-IP-Address = 192.168.10.3<br>
NAS-Port-Type = 27<br>
Calling-Station-Id = "\000!\000\r\302#"<br>
Chargeable-User-Identity = ""<br>
WiMAX-Release = "1.0"<br>
WiMAX-Accounting-Capabilities = IP-Session-Based<br>
WiMAX-Hotlining-Capabilities = Not-Supported<br>
WiMAX-Idle-Mode-Notification-Cap = Supported<br>
WiMAX-Available-In-Client = 3<br>
WiMAX-Session-Termination-Capability = Dynamic-Authorization<br>
WiMAX-GMT-Timezone-offset = 0<br>
WiMAX-BS-Id = 0x0050c21174a4<br>
Service-Type = Framed-User<br>
Framed-MTU = 2000<br>
State = 0xb02e8b12b5299e24e85eed5fd51d1721<br>
+- entering group authorize {...}<br>
++[preprocess] returns ok<br>
++[chap] returns noop<br>
++[mschap] returns noop<br>
[suffix] Looking up realm "wintegra.com" for User-Name =
<a class="moz-txt-link-rfc2396E" href="mailto:{am=1}anonymous@wintegra.com">"{am=1}anonymous@wintegra.com"</a><br>
[suffix] No such realm "wintegra.com"<br>
++[suffix] returns noop<br>
[eap] EAP packet type response id 7 length 6<br>
[eap] Continuing tunnel setup.<br>
++[eap] returns ok<br>
Found Auth-Type = EAP<br>
+- entering group authenticate {...}<br>
[eap] Request found, released from the list<br>
[eap] EAP/ttls<br>
[eap] processing type ttls<br>
[ttls] Authenticate<br>
[ttls] processing EAP-TLS<br>
[ttls] Received TLS ACK<br>
[ttls] ACK handshake is finished<br>
[ttls] eaptls_verify returned 3 <br>
[ttls] eaptls_process returned 3 <br>
[eap] Freeing handler<br>
++[eap] returns ok<br>
+- entering group post-auth {...}<br>
++[exec] returns noop<br>
expand: %{User-Name} -> {<a class="moz-txt-link-abbreviated" href="mailto:am=1}anonymous@wintegra.com">am=1}anonymous@wintegra.com</a><br>
++[reply] returns noop<br>
[wimax] MIP-RK =
0xbb6c5a61142b5ea022c642672827263bff98a118b84f50765922f66da96856f711222a71b050c13d3750d6b033a3c118e0fa6fcf3584371d4e16726398275853<br>
[wimax] MIP-SPI = 8208f229<br>
++[wimax] returns updated<br>
expand: %{EAP-MSK} -> <br>
++[reply] returns updated<br>
Sending Access-Accept of id 7 to 192.168.10.3 port 1812<br>
MS-MPPE-Recv-Key =
0xb65a961efab2c55ce875fc3503f22b4bac445cff17c37942f98759f9f3c867f5<br>
MS-MPPE-Send-Key =
0x2d8e7a16c5c308e58e12b01d3850d13a034ef84cf1c78b6dd9f1b63f978a7c20<br>
EAP-Message = 0x03070004<br>
Message-Authenticator = 0x00000000000000000000000000000000<br>
User-Name = <a class="moz-txt-link-rfc2396E" href="mailto:{am=1}anonymous@wintegra.com">"{am=1}anonymous@wintegra.com"</a><br>
WiMAX-IP-Technology = CMIP4<br>
WiMAX-hHA-IP-MIP4 = 192.168.10.3<br>
WiMAX-MN-hHA-MIP4-Key =
0x6b454a2f37575164c42355346cafdbcfc04e8574<br>
WiMAX-MN-hHA-MIP4-SPI = 703727746<br>
WiMAX-MSK = 0x<br>
Finished request 6.<br>
<br>
<br>
<blockquote cite="mid:4950B702.90309@deployingradius.com" type="cite">
<pre wrap="">Dimitris Theofilatos wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
At the section post-auth of the file raddb/sites-enabled/default i put
the next lines
update "reply"{
# WiMAX-MN-NAI = "%{User-Name}"
# WiMAX-IP-Technology = CMIP4
WiMAX-MSK = EAP-MSK
</pre>
</blockquote>
<pre wrap=""><!---->
See "man unlang". You need to use %{EAP-MSK}.
...
</pre>
<blockquote type="cite">
<pre wrap=""> WiMAX-MSK = 0x4541502d4d534b
WiMAX-MSK is not 64 bytes and the ASN-GW doen not accept it...
</pre>
</blockquote>
<pre wrap=""><!---->
It contains the ASCII string "EAP-MSK", which is what you told it to do.
</pre>
<blockquote type="cite">
<pre wrap="">Do i have to make more changes?
</pre>
</blockquote>
<pre wrap=""><!---->
Yes.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
</body>
</html>