<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><span>Hi,</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><span><br></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><span>I am trying CoA and DM with Alvarion ASN-GW and all the time I see Shared secret is incorrect for the AcK/NaK messagess received from the ASN. With other AAA, based also on FR, it is not happeing.</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><span><br></span></div><div><span><div>No. Time Source Destination Protocol Info</div><div> 1 0.000000 192.168.60.28
192.168.60.122 RADIUS Disconnect-Request(40) (id=28, l=126)</div><div><br></div><div>Frame 1: 168 bytes on wire (1344 bits), 168 bytes captured (1344 bits)</div><div> Arrival Time: Sep 7, 2011 11:56:04.799904000 E. Europe Daylight Time</div><div> Epoch Time: 1315385764.799904000 seconds</div><div> [Time delta from previous captured frame: 0.000000000 seconds]</div><div> [Time delta from previous displayed frame: 0.000000000 seconds]</div><div> [Time since reference or first frame: 0.000000000 seconds]</div><div> Frame Number: 1</div><div> Frame Length: 168 bytes (1344 bits)</div><div> Capture Length: 168 bytes (1344 bits)</div><div> [Frame is marked: False]</div><div> [Frame is ignored: False]</div><div> [Protocols in frame:
eth:ip:udp:radius]</div><div> [Coloring Rule Name: UDP]</div><div> [Coloring Rule String: udp]</div><div>Ethernet II, Src: IntelCor_3d:2f:ef (00:1b:21:3d:2f:ef), Dst: Cisco_82:0b:0c (00:23:33:82:0b:0c)</div><div> Destination: Cisco_82:0b:0c (00:23:33:82:0b:0c)</div><div> Address: Cisco_82:0b:0c (00:23:33:82:0b:0c)</div><div> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div> Source: IntelCor_3d:2f:ef (00:1b:21:3d:2f:ef)</div><div> Address: IntelCor_3d:2f:ef (00:1b:21:3d:2f:ef)</div><div> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div> .... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)</div><div> Type: IP (0x0800)</div><div>Internet Protocol, Src: 192.168.60.28 (192.168.60.28), Dst: 192.168.60.122 (192.168.60.122)</div><div> Version: 4</div><div> Header length: 20 bytes</div><div> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)</div><div> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div> .... ..0. = ECN-Capable Transport (ECT): 0</div><div> .... ...0 = ECN-CE: 0</div><div> Total Length: 154</div><div> Identification: 0xe708 (59144)</div><div> Flags: 0x00</div><div> 0... .... = Reserved bit: Not set</div><div> .0.. .... = Don't fragment: Not set</div><div> ..0. .... = More fragments: Not set</div><div>
Fragment offset: 0</div><div> Time to live: 64</div><div> Protocol: UDP (17)</div><div> Header checksum: 0x9963 [correct]</div><div> [Good: True]</div><div> [Bad: False]</div><div> Source: 192.168.60.28 (192.168.60.28)</div><div> Destination: 192.168.60.122 (192.168.60.122)</div><div>User Datagram Protocol, Src Port: 44512 (44512), Dst Port: radius-dynauth (3799)</div><div> Source port: 44512 (44512)</div><div> Destination port: radius-dynauth (3799)</div><div> Length: 134</div><div> Checksum: 0x46c1 [validation disabled]</div><div> [Good Checksum: False]</div><div> [Bad Checksum: False]</div><div>Radius Protocol</div><div> Code: Disconnect-Request (40)</div><div> Packet identifier: 0x1c
(28)</div><div> Length: 126</div><div> Authenticator: d87a22f8d9e48cb34e67b846c34f78c7</div><div> [The response to this request is in frame 2]</div><div> Attribute Value Pairs</div><div> AVP: l=46 t=User-Name(1): 6323AFDFB8A0E5AAB2582D5F39DF038D@alvarion.ro</div><div> User-Name: 6323AFDFB8A0E5AAB2582D5F39DF038D@alvarion.ro</div><div> AVP: l=41 t=Vendor-Specific(26) v=WiMAX(24757)</div><div> VSA: l=35 t=WiMAX-AAA-Session-Id(4) C=0x00: 313865643938336633633233373163366634626336393265...</div><div> WiMAX-AAA-Session-Id: 313865643938336633633233373163366634626336393265...</div><div> AVP: l=19 t=Calling-Station-Id(31): 00-17-c4-3d-41-ea</div><div>
Calling-Station-Id: 00-17-c4-3d-41-ea</div><div><br></div><div>0000 00 23 33 82 0b 0c 00 1b 21 3d 2f ef 08 00 45 00 .#3.....!=/...E.</div><div>0010 00 9a e7 08 00 00 40 11 99 63 c0 a8 3c 1c c0 a8 ......@..c..<...</div><div>0020 3c 7a ad e0 0e d7 00 86 46 c1 28 1c 00 7e d8 7a <z......F.(..~.z</div><div>0030 22 f8 d9 e4 8c b3 4e 67 b8 46 c3 4f 78 c7 01 2e ".....Ng.F.Ox...</div><div>0040 36 33 32 33 41 46 44 46 42 38 41 30 45 35 41 41 6323AFDFB8A0E5AA</div><div>0050 42 32 35 38 32 44 35 46 33 39 44 46 30 33 38 44 B2582D5F39DF038D</div><div>0060 40 61 6c 76 61 72 69 6f 6e 2e 72 6f 1a 29 00 00 @alvarion.ro.)..</div><div>0070 60 b5 04 23 00 31 38 65 64 39 38 33 66 33 63 32 `..#.18ed983f3c2</div><div>0080 33 37 31 63 36 66 34 62 63 36 39 32 65 30 63 38 371c6f4bc692e0c8</div><div>0090 39 64 66 66 65 1f 13 30 30 2d 31 37
2d 63 34 2d 9dffe..00-17-c4-</div><div>00a0 33 64 2d 34 31 2d 65 61 3d-41-ea</div><div><br></div><div>No. Time Source Destination Protocol Info</div><div> 2 0.006588 192.168.60.122 192.168.60.28 RADIUS Disconnect-ACK(41) (id=28, l=20)</div><div><br></div><div>Frame 2: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)</div><div> Arrival Time: Sep 7, 2011 11:56:04.806492000 E. Europe Daylight Time</div><div> Epoch Time: 1315385764.806492000 seconds</div><div> [Time delta from previous captured frame: 0.006588000 seconds]</div><div> [Time delta from previous displayed
frame: 0.006588000 seconds]</div><div> [Time since reference or first frame: 0.006588000 seconds]</div><div> Frame Number: 2</div><div> Frame Length: 62 bytes (496 bits)</div><div> Capture Length: 62 bytes (496 bits)</div><div> [Frame is marked: False]</div><div> [Frame is ignored: False]</div><div> [Protocols in frame: eth:ip:udp:radius]</div><div> [Coloring Rule Name: UDP]</div><div> [Coloring Rule String: udp]</div><div>Ethernet II, Src: Cisco_82:0b:0c (00:23:33:82:0b:0c), Dst: IntelCor_3d:2f:ef (00:1b:21:3d:2f:ef)</div><div> Destination: IntelCor_3d:2f:ef (00:1b:21:3d:2f:ef)</div><div> Address: IntelCor_3d:2f:ef (00:1b:21:3d:2f:ef)</div><div> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div> .... ..0. .... ....
.... .... = LG bit: Globally unique address (factory default)</div><div> Source: Cisco_82:0b:0c (00:23:33:82:0b:0c)</div><div> Address: Cisco_82:0b:0c (00:23:33:82:0b:0c)</div><div> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div> Type: IP (0x0800)</div><div>Internet Protocol, Src: 192.168.60.122 (192.168.60.122), Dst: 192.168.60.28 (192.168.60.28)</div><div> Version: 4</div><div> Header length: 20 bytes</div><div> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)</div><div> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div> .... ..0. = ECN-Capable Transport (ECT): 0</div><div>
.... ...0 = ECN-CE: 0</div><div> Total Length: 48</div><div> Identification: 0x0034 (52)</div><div> Flags: 0x02 (Don't Fragment)</div><div> 0... .... = Reserved bit: Not set</div><div> .1.. .... = Don't fragment: Set</div><div> ..0. .... = More fragments: Not set</div><div> Fragment offset: 0</div><div> Time to live: 63</div><div> Protocol: UDP (17)</div><div> Header checksum: 0x41a2 [correct]</div><div> [Good: True]</div><div> [Bad: False]</div><div> Source: 192.168.60.122 (192.168.60.122)</div><div> Destination: 192.168.60.28 (192.168.60.28)</div><div>User Datagram Protocol, Src Port: radius-dynauth (3799), Dst Port: 44512 (44512)</div><div> Source port: radius-dynauth
(3799)</div><div> Destination port: 44512 (44512)</div><div> Length: 28</div><div> Checksum: 0x9131 [validation disabled]</div><div> [Good Checksum: False]</div><div> [Bad Checksum: False]</div><div>Radius Protocol</div><div> Code: Disconnect-ACK (41)</div><div> Packet identifier: 0x1c (28)</div><div> Length: 20</div><div> Authenticator: e175db63a6510f8f0e0319352deac6d8</div><div> [This is a response to a request in frame 1]</div><div> [Time from request: 0.006588000 seconds]</div><div><br></div><div>0000 00 1b 21 3d 2f ef 00 23 33 82 0b 0c 08 00 45 00 ..!=/..#3.....E.</div><div>0010 00 30 00 34 40 00 3f 11 41 a2 c0 a8 3c 7a c0 a8 .0.4@.?.A...<z..</div><div>0020 3c 1c 0e d7 ad e0 00 1c 91 31 29 1c 00 14 e1 75 <........1)....u</div><div>0030
db 63 a6 51 0f 8f 0e 03 19 35 2d ea c6 d8 .c.Q.....5-...</div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "> </div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><div><div><div><font face="comic sans ms">Martin Ion</font></div><br><div><font face="Comic Sans MS"></font> </div></div></div></div></div></body></html>