<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Verdana}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
pre
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New"}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
span.apple-converted-space
{}
span.bold
{}
span.HTMLPreformattedChar
{font-family:"Courier New"}
.MsoChpDefault
{}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi,</p>
<p class="MsoNormal">We are trying to bring up MACsec with Cisco and FR, and we are stuck because of Radius unable to send
<span style="font-size:12.0pt; color:black">EAP-Key-Name AVP. Below is what is expected as per RFC4072
</span></p>
<p class="MsoNormal"> </p>
<pre style="page-break-before:always">RFC4072 says “<span style="font-size:12.0pt; color:black">A home Diameter server receiving a</span></pre>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> Diameter-EAP-Request with a Key-Name AVP with non-empty data MUST</span></p>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> silently discard the AVP. In addition, the home Diameter server</span></p>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> SHOULD include this AVP in Diameter-EAP-Response only if an empty</span></p>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> EAP-Key-Name AVP was present in Diameter-EAP-Request.”</span></p>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> </span></p>
<pre style="page-break-before:always"><span style="font-size:12.0pt; color:black">But radius server is not sending EAP-Key-Name AVP (Radius Attribute Type 102) even invalid AVP present in the Diameter-EAP-Request”.</span></pre>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> </span></p>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black">Below is the debug print of radius</span></p>
<p class="MsoNormal" style="page-break-before:always"><span style="font-size:12.0pt; font-family:"Courier New"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black; background:white">Sending Access-Accept of id 647 to 10.20.64.9 port 1645<span class="apple-converted-space"> </span></span><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black"><br>
<span style="background:white"> MS-MPPE-Recv-</span><span class="bold"><b><span style="background:#FFFF99">Key</span></b></span><span class="apple-converted-space"><span style="background:white"> </span></span><span style="background:white">= 0x84e5c624c3bcdeadca3c6210f24bd7b8336921ccc1c58399d397afc75770332c<span class="apple-converted-space"> </span></span><br>
<span style="background:white"> MS-MPPE-Send-</span><span class="bold"><b><span style="background:#FFFF99">Key</span></b></span><span class="apple-converted-space"><span style="background:white"> </span></span><span style="background:white">= 0xa6c4860cc8092c251502f5adc3ee13586e05fe84cbbb8b6793b08d9523d12b1f<span class="apple-converted-space"> </span></span><br>
<span style="background:white"> <span class="apple-converted-space"> </span></span><span class="bold"><b><span style="background:#FFFF99">EAP</span></b></span><span style="background:white">-Message =<span class="apple-converted-space"> 0x03060004</span></span><br>
<span style="background:white"> Message-Authenticator = 0x00000000000000000000000000000000<span class="apple-converted-space"> </span></span><br>
<span style="background:white"> User-Name = "user1"<span class="apple-converted-space"> </span></span></span></p>
<p class="MsoNormal"><span class="apple-converted-space"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black; background:white"> </span></span></p>
<p class="MsoNormal"><span class="apple-converted-space"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black; background:white">Does anyone have clue on this.</span></span></p>
<p class="MsoNormal"><span class="apple-converted-space"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black; background:white"> </span></span></p>
<p class="MsoNormal"><span class="apple-converted-space"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black; background:white">Thanks,</span></span></p>
<p class="MsoNormal"><span class="apple-converted-space"><span style="font-size:10.0pt; font-family:"Verdana","sans-serif"; color:black; background:white">Srinivas
</span></span></p>
</div>
<p class="MsoNormal" style="margin-left:.5in"><i><span style="font-size:10.0pt; color:black">CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.</span></i></p>
</body>
</html>