Sorry for the screen capture. Here the reply with tag equal to 1: Frame 6: 80 bytes on wire (640 bits), 80 bytes captured (640 bits) on interface 0 Ethernet II, Src: Vmware_1c:1f:3d (00:0c:29:1c:1f:3d), Dst: Vmware_9d:00:59 (00:50:56:9d:00:59) Internet Protocol Version 4, Src: 172.20.135.4, Dst: 172.20.110.250 User Datagram Protocol, Src Port: 1812, Dst Port: 34863 RADIUS Protocol Code: Access-Accept (2) Packet identifier: 0x86 (134) Length: 38 Authenticator: 9bbbb286df738ecf24be871d7b95de37 [This is a response to a request in frame 5] [Time from request: 0.011010775 seconds] Attribute Value Pairs AVP: t=Tunnel-Type(64) l=6 Tag=0x01 val=VLAN(13) AVP: t=Tunnel-Medium-Type(65) l=6 Tag=0x01 val=IEEE-802(6) AVP: t=Tunnel-Private-Group-Id(81) l=6 Tag=0x01 val=195 And the one with the tag unset: Frame 6: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) on interface 0 Ethernet II, Src: Vmware_1c:1f:3d (00:0c:29:1c:1f:3d), Dst: Vmware_9d:00:59 (00:50:56:9d:00:59) Internet Protocol Version 4, Src: 172.20.135.4, Dst: 172.20.110.250 User Datagram Protocol, Src Port: 1812, Dst Port: 34863 RADIUS Protocol Code: Access-Accept (2) Packet identifier: 0x87 (135) Length: 37 Authenticator: 50e7dce3cdc0c2d5391576d11372c573 [This is a response to a request in frame 5] [Time from request: 0.003153571 seconds] Attribute Value Pairs AVP: t=Tunnel-Type(64) l=6 Tag=0x00 val=VLAN(13) AVP: t=Tunnel-Medium-Type(65) l=6 Tag=0x00 val=IEEE-802(6) AVP: t=Tunnel-Private-Group-Id(81) l=5 val=195 You can see that when there is no tag then it miss Tag=0x00 for the attribute 81. Regards Fabrice Le 19-01-21 à 16 h 13, Nathan Ward a écrit :
On 22/01/2019, at 10:05 AM, Fabrice Durand <fdurand@inverse.ca> wrote:
By searching for the issue i noticed that the attribute attribute Tunnel-Private-Group-ID is untag in the network capture: I think you might have had a screen capture here or something - but that won’t get through the list.
I also check the rfc (https://tools.ietf.org/html/rfc2868) and the tag is suppose to be here.
Is it a bug in FreeRADIUS or is it something normal ? Tag zero means unused. Try set it to 1, and see how you go.
From RFC2868: "If the Tag field is unused, it MUST be zero (0x00)”.
-- Nathan Ward
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Fabrice Durand fdurand@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)