If I recall, you said you're using an FC12. Try deactivating the FC firewall and try again. service iptables stop If it doesn't work, I would go after SELinux. Deactivating it could be helpful, at least just to give it a try. On Wednesday 09 December 2009 10:31:55 pm Alex Bahoor wrote:
Hi,
I'm getting trouble authenticating my AP to freeradius. When I type in a password on the AP, it reaches the radius server, however the server responds with ICMP destination unreachable to the AP. I can see radius is listening to the following ports:
Udp 0 0 *:radius Udp 0 0 *:radius-acct
I take it the above are port 1812 and 1813 respectfully. Right? I see the Cisco AP is sending request with destination port 1812. So, any clue as to why it sending the ICMP unreachable? It seems that the port numbers are not what I think they are, but netstat identifies the two ports as radius default, so it got to be right. But I know that icmp unreachable is only sent out (in this case), if the server cannot identify the destination port number.
How can I locally test that radius is serving the port above and the password. Like is there a way that I can use CLI to test the radius as if I'm the AP, but from the command line on the server?
Thanks,
Alex
__________ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __________
The message was checked by ESET NOD32 Antivirus.
__________ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __________
The message was checked by ESET NOD32 Antivirus.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html