Hi, ask ASN-GW vendor if it passed IOT with FR. 15 марта 2012, 09:58 от Rathod Subhashchandra <rathod@tataelxsi.co.in>:
Dear Fajar,
I went through the documentation of ASN-GW. I could not find configuring AAA parameters except AAA IP address.
I am not quite clear which attribute is causing the problem. For EAP-TTLS, almost same ACCESS-ACCEPT attributes are through. But for EAP-TLS I am facing this issue.
I am attaching the AAA wireshark logs. Please let me know your valuable feedback.
Thanks ! Rathod.
-----Original Message----- From: Fajar A. Nugraha [mailto:list@fajar.net] Sent: Thursday, March 15, 2012 11:00 AM To: rathod@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed
On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra <rathod@tataelxsi.co.in> wrote:
Wireshark logs @ ASN-GW
I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACCESS-ACCEPT message copied to MS word.
While that information might be interesting for ASN support/list/forum, this list is not it.
What are the mandatory fields in Access-Accept and their valid values?
Service-Type attribute value is 2. ASN-GW is adding this attribute. Is this valid for EAP-TLS?
I am guessing this should be 8. I don't have control over ASN-GW parameters modification.
Please let me know what fields are invalid in above ACCESS-ACCEPT.
Did you try asking the NAS vendor?
If you know what attributes are needed, you can configure FR to send it. If you don't know what they are, then you should ask the NAS vendor, or at least read its documentation.
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html