<div> <pre style="font-size: 9pt;"><tt><tt>Hi Alan,<br>
<br>
Thanks for the response. My original email was very lengthy, but at the bottom you can see a wireshark capture showing the packet arrival. (My understanding is wireshark is a pretty GUI based on tcpdump)<br>
<br>
What is strange is I tried to do the test in the reverse direction and it works i.e.<br>
<br>
10.10.10.11 = radisusd server <=== 10.10.10.10 = radtest client<br>
<br>
Does not work<br>
<br>
</tt></tt><tt><tt><tt><tt>10.10.10.11 = radtest client ===> 10.10.10.10 = radiusd server <br>
<br>
Works<br>
<br>
<br>
The host 10.10.10.11 is running 32 bit OpenSuse 11.1<br>
while host 10.10.10.10 is running 64bit OpenSuse 11.1<br>
</tt></tt></tt></tt><font face="Arial, Helvetica, sans-serif"><br>
I have fallen back to default install with only the following files [edits users & clients.conf] (to reflect the opposite endpoints)<br>
<br>
So far the 32 bit machine appears to be silently dead as far as radiusd<br>
</font><br>
<tt><tt><br>
<br>
Date: Sat, 7 Mar 2009 19:29:05 +0000<br>
From: <a href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a><br>
Subject: Re: radiusd server does not respond to radtest from another<br>
host<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:20090307192905.GA28192@lboro.ac.uk">20090307192905.GA28192@lboro.ac.uk</a>><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
Hi,<br>
<br>
> Next I tried testing radiusd using radtest from a 2nd host (10.10.10.10), <br>
which I had added previously added to the clients.conf (Note I can successfully <br>
ping the radius server 10.10.10.11 from this 2nd host 10.10.10.10).?But, I get <br>
no response from radius acc-request on either the radiusd terminal window or the <br>
radtest terminal window.<br>
<br>
just like another current thread - have a couple of terminal windows<br>
opn.<br>
<br>
in one, run<br>
<br>
tcpdump -eqnnntl -i eth0 port 1812 (change eth0 if necessary)<br>
<br>
in the other, run<br>
<br>
radiusd -X<br>
<br>
<br>
now, run the test. does anything show packets? have you enabled<br>
the firewall to allow port 1812 inbound from 10.10.10.10? <br>
<br>
<br>
alan<br>
</tt></tt></pre>
</div>
<div> <br>
</div>
<div> <br>
</div>
-----Original Message-----<br>
From: mbhorner@aol.com<br>
To: freeradius-users@lists.freeradius.org<br>
Sent: Sat, 7 Mar 2009 11:06 am<br>
Subject: radiusd server does not respond to radtest from another host<br>
<br>
<div id="AOLMsgPart_2_05b5d6a6-4a6b-48d9-bded-9a5c592a55be">
<div><font face="Arial, Helvetica, sans-serif"></font><br>
Attached is wireshark capture on the radius server (10.10.10.11) showing the packet arrives from the rad test client (10.10.10.10)<br>
<br>
No. Time Source Destination Protocol Info<br>
2 2.997586 10.10.10.10 10.10.10.11 RADIUS Access-Request(1) (id=241, l=58), Duplicate Request ID:241</div>
<div>Frame 2 (100 bytes on wire, 100 bytes captured)<br>
Arrival Time: Mar 7, 2009 10:02:20.966147000<br>
[Time delta from previous captured frame: 2.997586000 seconds]<br>
[Time delta from previous displayed frame: 2.997586000 seconds]<br>
[Time since reference or first frame: 2.997586000 seconds]<br>
Frame Number: 2<br>
Frame Length: 100 bytes<br>
Capture Length: 100 bytes<br>
[Frame is marked: False]<br>
[Protocols in frame: eth:ip:udp:radius]<br>
[Coloring Rule Name: UDP]<br>
[Coloring Rule String: udp]<br>
Ethernet II, Src: 3com_ac:0a:0c (00:50:da:ac:0a:0c), Dst: DellPcba_78:86:32 (00:0d:56:78:86:32)<br>
Destination: DellPcba_78:86:32 (00:0d:56:78:86:32)<br>
Address: DellPcba_78:86:32 (00:0d:56:78:86:32)<br>
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)<br>
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)<br>
Source: 3com_ac:0a:0c (00:50:da:ac:0a:0c)<br>
Address: 3com_ac:0a:0c (00:50:da:ac:0a:0c)<br>
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)<br>
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)<br>
Type: IP (0x0800)<br>
Internet Protocol, Src: 10.10.10.10 (10.10.10.10), Dst: 10.10.10.11 (10.10.10.11)<br>
Version: 4<br>
Header length: 20 bytes<br>
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)<br>
0000 00.. = Differentiated Services Codepoint: Default (0x00)<br>
.... ..0. = ECN-Capable Transport (ECT): 0<br>
.... ...0 = ECN-CE: 0<br>
Total Length: 86<br>
Identification: 0x0000 (0)<br>
Flags: 0x04 (Don't Fragment)<br>
0... = Reserved bit: Not set<br>
.1.. = Don't fragment: Set<br>
..0. = More fragments: Not set<br>
Fragment offset: 0<br>
Time to live: 64<br>
Protocol: UDP (0x11)<br>
Header checksum: 0x126f [correct]<br>
[Good: True]<br>
[Bad : False]<br>
Source: 10.10.10.10 (10.10.10.10)<br>
Destination: 10.10.10.11 (10.10.10.11)<br>
User Datagram Protocol, Src Port: 47970 (47970), Dst Port: radius (1812)<br>
Source port: 47970 (47970)<br>
Destination port: radius (1812)<br>
Length: 66<br>
Checksum: 0xc264 [correct]<br>
[Good Checksum: True]<br>
[Bad Checksum: False]<br>
Radius Protocol<br>
Code: Access-Request (1)<br>
Packet identifier: 0xf1 (241)<br>
Length: 58<br>
Authenticator: DF4A578FEB08708AEFEA3236CA37650C<br>
[Duplicate Request: 241]<br>
Attribute Value Pairs<br>
AVP: l=8 t=User-Name(1): pencil<br>
User-Name: pencil<br>
AVP: l=18 t=User-Password(2): Encrypted<br>
User-Password: \267\017U\227\320\216\305\y\373\314\377\306\316\350\255<br>
AVP: l=6 t=NAS-IP-Address(4): 127.0.0.2<br>
NAS-IP-Address: 127.0.0.2 (127.0.0.2)<br>
AVP: l=6 t=NAS-Port(5): 0<br>
NAS-Port: 0<br>
</div>
<div> </div>
<div><br>
<br>
</div>
<div id="MAILCIAMA013-5bb049b29b72c4" class="aol_ad_footer"><br>
<font style="color: black; font-family: arial,san-serif; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"> <hr style="margin-top: 10px;">Access 350+ FREE radio stations anytime from anywhere on the web. <a target="_blank" href="http://toolbar.aol.com/aolradio/download.html?ncid=emlweusdown00000035">Get the Radio Toolbar</a>!</font> </div>
</div>
<!-- end of AOLMsgPart_2_05b5d6a6-4a6b-48d9-bded-9a5c592a55be -->
<div id='MAILCIADA041-5bcb49b32606ae' class='aol_ad_footer'><br/><font style="color:black;font:normal 10pt arial,san-serif;"> <hr style="margin-top:10px"/>Access 350+ FREE radio stations anytime from anywhere on the web. <a href="http://toolbar.aol.com/aolradio/download.html?ncid=emlweusdown00000035">Get the Radio Toolbar</a>!</font> </div>