Whats happening here? It's like the radius tries to send a request back to the supplicant, but gives up...<br>The supplicant is NAT'ed behind 192.168.0.1 could that be causing a issue? I have tried DMZ'ing the supplicant still with no success...<br>
<br>Any ideas? Thanks for the help<br><br><br><br>rad_recv: Access-Request packet from host 192.168.0.1 port 50334, id=4, length=293<br> User-Name = "<a href="mailto:user@example.com" target="_blank">user@example.com</a>"<br>
NAS-IP-Address = 10.1.10.125<br> Framed-MTU = 1488<br>
Service-Type = Framed-User<br> NAS-Port = 101<br> Called-Station-Id = "00:0d:67:0c:e4:b8:ssidradius"<br> Calling-Station-Id = "00:1f:41:00:4c:f0"<br> NAS-Port-Type = Wireless-802.11<br>
NAS-Identifier = "belair"<br> Connect-Info = "CONNECT 11Mbps 802.11b"<br> State = 0x6b173f2c6b153285c2b292790cdb3215<br> EAP-Message = 0x0202006a0d00160301005f0100005b030148ab6bfe07adac217c9be3adfa4c0d81f59f6fc9c85de2f84ff594d9ef567d9b00003400390038003500160013000a00330032002f006600050004006300620061001500120009006500640060001400110008000600030100<br>
Message-Authenticator = 0xbdf917161b202095f4a13c0d9b4419ae<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] Looking up realm "<a href="http://example.com" target="_blank">example.com</a>" for User-Name = "<a href="mailto:user@example.com" target="_blank">user@example.com</a>"<br>
[suffix] No such realm "<a href="http://example.com" target="_blank">example.com</a>"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 2 length 106<br>[eap] No EAP Start, assuming it's an on-going EAP conversation<br>
++[eap] returns updated<br>++[unix] returns notfound<br>++[files] returns noop<br>++[expiration] returns noop<br>++[logintime] returns noop<br>++[pap] returns noop<br>Found Auth-Type = EAP<br>+- entering group authenticate {...}<br>
[eap] Request found, released from the list<br>[eap] EAP/tls<br>[eap] processing type tls<br>[tls] Authenticate<br>[tls] processing EAP-TLS<br>[tls] eaptls_verify returned 7<br>[tls] Done initial handshake<br>[tls] (other): before/accept initialization<br>
[tls] TLS_accept: before/accept initialization<br>[tls] <<< TLS 1.0 Handshake [length 005f], ClientHello<br>[tls] TLS_accept: SSLv3 read client hello A<br>[tls] >>> TLS 1.0 Handshake [length 002a], ServerHello<br>
[tls] TLS_accept: SSLv3 write server hello A<br>[tls] >>> TLS 1.0 Handshake [length 085e], Certificate<br>[tls] TLS_accept: SSLv3 write certificate A<br>[tls] >>> TLS 1.0 Handshake [length 020d], ServerKeyExchange<br>
[tls] TLS_accept: SSLv3 write key exchange A<br>[tls] >>> TLS 1.0 Handshake [length 00a8], CertificateRequest<br>[tls] TLS_accept: SSLv3 write certificate request A<br>[tls] TLS_accept: SSLv3 flush data<br>
[tls] TLS_accept: Need to read more data: SSLv3 read client certificate A<br>In SSL Handshake Phase<br>In SSL Accept mode<br>[tls] eaptls_process returned 13<br>++[eap] returns handled<br>Sending Access-Challenge of id 4 to 68.62.165.40 port 50334<br>
EAP-Message = 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<br>
EAP-Message = 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<br>
EAP-Message = 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<br>
EAP-Message = 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<br>
EAP-Message = 0xa73082038fa0030201020209<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x6b173f2c6a143285c2b292790cdb3215<br>Finished request 5.<br>Going to the next request<br>
Waking up in 4.8 seconds.<br>rad_recv: Access-Request packet from host 192.168.0.1 port 50334, id=6, length=193<br> User-Name = "<a href="mailto:user@example.com" target="_blank">user@example.com</a>"<br>
NAS-IP-Address = 10.1.10.125<br>
Framed-MTU = 1488<br> Service-Type = Framed-User<br> NAS-Port = 101<br> Called-Station-Id = "00:0d:67:0c:e4:b8:ssidradius"<br> Calling-Station-Id = "00:1f:41:00:4c:f0"<br>
NAS-Port-Type = Wireless-802.11<br> NAS-Identifier = "belair"<br> Connect-Info = "CONNECT 11Mbps 802.11b"<br> State = 0x6b173f2c6a143285c2b292790cdb3215<br> EAP-Message = 0x020300060d00<br>
Message-Authenticator = 0x07990d4d71ee1cadfeac32aa7d03bb45<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] Looking up realm "<a href="http://example.com" target="_blank">example.com</a>" for User-Name = "<a href="mailto:user@example.com" target="_blank">user@example.com</a>"<br>
[suffix] No such realm "<a href="http://example.com" target="_blank">example.com</a>"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 3 length 6<br>[eap] No EAP Start, assuming it's an on-going EAP conversation<br>
++[eap] returns updated<br>++[unix] returns notfound<br>++[files] returns noop<br>++[expiration] returns noop<br>++[logintime] returns noop<br>++[pap] returns noop<br>Found Auth-Type = EAP<br>+- entering group authenticate {...}<br>
[eap] Request found, released from the list<br>[eap] EAP/tls<br>[eap] processing type tls<br>[tls] Authenticate<br>[tls] processing EAP-TLS<br>[tls] Received TLS ACK<br>[tls] ACK handshake fragment handler<br>[tls] eaptls_verify returned 1<br>
[tls] eaptls_process returned 13<br>++[eap] returns handled<br>Sending Access-Challenge of id 6 to 68.62.165.40 port 50334<br> EAP-Message = 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<br>
EAP-Message = 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<br>
EAP-Message = 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<br>
EAP-Message = 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<br>
EAP-Message = 0x200b05347340d93ae132357c<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x6b173f2c69133285c2b292790cdb3215<br>Finished request 6.<br>Going to the next request<br>
<br>