On 24/08/2011 11:31, Jonathan Gazeley wrote:
Hi all,
Not directly related to FreeRADIUS but I gather people here have some experience with Cisco WiSMs and 802.1x.
I'm trying to use radclient to craft a Disconnect-Request packet to disconnect a user on an 802.1x network. I've checked the RFCs for the Disconnect-Request packets and I believe I am providing all the necessary attributes to disconnect a user, however the WiSM always responds:
rad_recv: Disconnect-NAK packet from host 172.17.107.211 port 3799, id=219, length=26 Error-Cause = Missing-Attribute
I am sending packets like these:
Sending Disconnect-Request of id 219 to 172.17.107.211 port 3799 User-Name = "jg4461" Calling-Station-Id = "00:1b:63:08:b4:eb" Framed-IP-Address = 172.21.107.197 Called-Station-Id = "00:21:55:ac:5b:60:ResNet-Wireless" NAS-Port-Id = "29" NAS-Port-Type = Async Acct-Session-Id = "jg44614ddcd9e6/00:1b:63:08:b4:eb/222935" NAS-IP-Address = 172.17.107.211 NAS-Port = 29 NAS-Identifier = "wism11"
So, does anyone know which attributes I must send to disconnect a user in this way? Is there an easier way of doing it?
radclient -xs -f /tmp/disconnect.txt 172.17.107.210:3799 disconnect secret Sending Disconnect-Request of id 7 to 172.17.107.210 port 3799 User-Name = "testUser@bristol.ac.uk" Calling-Station-Id = "89:c6:65:99:39:52" Service-Type = Login-User rad_recv: Disconnect-ACK packet from host 172.17.107.210 port 3799, id=7, length=20 Total approved auths: 1 Total denied auths: 0 Total lost auths: 0 ...so it seems you need User-Name, Calling-Station-Id and Service-Type. -James -- James J J Hooper Senior Network Specialist, University of Bristol http://www.wireless.bristol.ac.uk --