<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi,<div>There seems to be a change that’s happened between vsn 2.2.1 and 2.2.2</div><div><br></div><div>We’re in the process of implementing a phased take-over of the management of our CSE dept radius services. What I’m doing is</div><div><br></div><div>1). Point CSE switches at our radius server</div><div>2) Check mac address of client ( calling station id)</div><div>3). If I know about it, perform mac-auth and send access accept with appropriate parameters</div><div>4). If I don’t know about it proxy it off to another server which in turn proxies it off to the CSE radius service and act upon the result that comes back. </div><div><br></div><div>This all worked just fine for 2.2.0 and 2.2.1.In the log file I’d also see entries of the form </div><div><br></div><div><div style="margin: 0px; font-family: Menlo;">Fri Nov 1 16:17:10 2013 : Auth: Login incorrect (Home Server says so): [<blah!>/<CHAP-Password>] (from client nasaaa5 port 48 cli <mac-address of client>)</div></div><div style="margin: 0px; font-family: Menlo;"><br></div><div style="margin: 0px; font-family: Menlo;">Which is fine, it just means that I don't know that mac address and neither does the remote (CSE) server. It’s usually a client that is trying to do a macauth 1st and then an EAP auth with user credentials.</div><div style="margin: 0px; font-family: Menlo;"><br></div><div style="margin: 0px; font-family: Menlo;">An upgrade to 2.2.2 caused these messages to disappear. I saw another freeradius message to day that implied theres been a change that silently drops access-rejects instead of passing them back up the food chain to the client … or something like that…. managed to delete the message :-(( </div><div style="margin: 0px; font-family: Menlo;"><br></div><div style="margin: 0px; font-family: Menlo;">If that’s the case, how do I get the 2.2.1/2.2.0 functionality back please.</div><div style="margin: 0px; font-family: Menlo;"><br></div><div style="margin: 0px; font-family: Menlo;">Rgds</div><div style="margin: 0px; font-family: Menlo;">Alex</div><div style="margin: 0px; font-family: Menlo;"><br></div></body></html>