Hi, thanks for your help till now. I was on vacation and today i tried again to resolve the issue between the FreeRadius and ASN-GW At the section post-auth of the file raddb/sites-enabled/default i put the next lines update "reply"{ WiMAX-MN-NAI = "%{User-Name}" WiMAX-IP-Technology = "CMIP4" WiMAX-hHA-IP-MIP4 = "192.168.10.3" } wimax update "reply"{ WiMAX-MSK = "%{EAP-MSK}" } Now i don't have warnings (Mobile IP keys are generated normally) but WIMAX-MSK is not 64 bytes again.. Below is the log from radiusd -X Going to the next request Waking up in 2.5 seconds. rad_recv: Access-Request packet from host 192.168.10.3 port 1812, id=7, length=208 User-Name = "{am=1}anonymous@wintegra.com" EAP-Message = 0x020700061500 Message-Authenticator = 0x376c02573adcce4466d564295fd56891 NAS-IP-Address = 192.168.10.3 NAS-Port-Type = 27 Calling-Station-Id = "\000!\000\r\302#" Chargeable-User-Identity = "" WiMAX-Release = "1.0" WiMAX-Accounting-Capabilities = IP-Session-Based WiMAX-Hotlining-Capabilities = Not-Supported WiMAX-Idle-Mode-Notification-Cap = Supported WiMAX-Available-In-Client = 3 WiMAX-Session-Termination-Capability = Dynamic-Authorization WiMAX-GMT-Timezone-offset = 0 WiMAX-BS-Id = 0x0050c21174a4 Service-Type = Framed-User Framed-MTU = 2000 State = 0xb02e8b12b5299e24e85eed5fd51d1721 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "wintegra.com" for User-Name = "{am=1}anonymous@wintegra.com" [suffix] No such realm "wintegra.com" ++[suffix] returns noop [eap] EAP packet type response id 7 length 6 [eap] Continuing tunnel setup. ++[eap] returns ok Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/ttls [eap] processing type ttls [ttls] Authenticate [ttls] processing EAP-TLS [ttls] Received TLS ACK [ttls] ACK handshake is finished [ttls] eaptls_verify returned 3 [ttls] eaptls_process returned 3 [eap] Freeing handler ++[eap] returns ok +- entering group post-auth {...} ++[exec] returns noop expand: %{User-Name} -> {am=1}anonymous@wintegra.com ++[reply] returns noop [wimax] MIP-RK = 0xbb6c5a61142b5ea022c642672827263bff98a118b84f50765922f66da96856f711222a71b050c13d3750d6b033a3c118e0fa6fcf3584371d4e16726398275853 [wimax] MIP-SPI = 8208f229 ++[wimax] returns updated expand: %{EAP-MSK} -> ++[reply] returns updated Sending Access-Accept of id 7 to 192.168.10.3 port 1812 MS-MPPE-Recv-Key = 0xb65a961efab2c55ce875fc3503f22b4bac445cff17c37942f98759f9f3c867f5 MS-MPPE-Send-Key = 0x2d8e7a16c5c308e58e12b01d3850d13a034ef84cf1c78b6dd9f1b63f978a7c20 EAP-Message = 0x03070004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "{am=1}anonymous@wintegra.com" WiMAX-IP-Technology = CMIP4 WiMAX-hHA-IP-MIP4 = 192.168.10.3 WiMAX-MN-hHA-MIP4-Key = 0x6b454a2f37575164c42355346cafdbcfc04e8574 WiMAX-MN-hHA-MIP4-SPI = 703727746 WiMAX-MSK = 0x Finished request 6.
Dimitris Theofilatos wrote:
Hi, At the section post-auth of the file raddb/sites-enabled/default i put the next lines update "reply"{ # WiMAX-MN-NAI = "%{User-Name}" # WiMAX-IP-Technology = CMIP4 WiMAX-MSK = EAP-MSK
See "man unlang". You need to use %{EAP-MSK}.
...
WiMAX-MSK = 0x4541502d4d534b
WiMAX-MSK is not 64 bytes and the ASN-GW doen not accept it...
It contains the ASCII string "EAP-MSK", which is what you told it to do.
Do i have to make more changes?
Yes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html