On Mon, Jan 5, 2015 at 1:31 PM, Phil Mayers <p.mayers@imperial.ac.uk> wrote:

On 05/01/15 13:23, Nick Lowe wrote:

I pointed out to Aerohive that they were missing the Service-Type AVP on
all but 802.1X authentication. It got fixed in a subsequent software
release.

That's a welcome change from the norm then

It is probably atypical but it does mean that not all vendors are the same. I have had similar issues with HP in the past and got nowhere at all.

I think it's worth trying though, and being persistent.

Aerohive have actually been really responsive to the issues that I have raised:

I also historically had problems where:

  • The User-Name AVP would get truncated to 31 characters.
  • A malformed Called-Station-ID attribute was sent after boot with an empty SSID component until the AP had fully initialized.
  • Acct-Multi-Session-Id AVP not sent in an ASCII/UTF-8 encoded value.
These were fixed in a special build they got to me in a under a week, then rolled in to the next general release.

They also added the Acct-Session-Id to the Accounting-On packet they were sending after I pointed out that this strictly broke the spec.

In their upcoming 6.4r1 software release they should be fixing other things I've reported:
  • Framed-IP-Address accuracy/spoofing issue where an AP would use ARP and not DHCP snooped information only to populate the value.
  • Framed-IP-Address issue where an async Interim-Update would not be sent when DHCP snooped information became available, only picked up on the next regular accounting interval.
  • Event-Timestamp missing from Accounting-On and Start.
Nick