On 1/9/24 14:55, Matthew Newton via Freeradius-Users wrote:
On 09/01/2024 11:27, Majed Zouhairy wrote:
121061: Jan 9 14:16:04.134: AAA/MEMORY: create_user (0x49EAF010) user='donatello' ruser='NULL' ds0=0 port='' rem_addr='NULL' authen_type=ASCII service=LOGIN priv=1 initial_task_id='0', vrf= (id=0)No authoritative response from any server. 4G-E-1st# 121062: Jan 9 14:16:24.244: AAA/MEMORY: free_user (0x49EAF010) user='donatello' ruser='NULL' port='' rem_addr='NULL' authen_type=ASCII service=LOGIN priv=1 vrf= (id=0)
telnet to radius server 22 port succeeds, to port 1812 fails says telnet 10.16.11.12 1812 Trying 10.16.11.12, 1812 ... % Destination unreachable; gateway or host down
RADIUS on port 1812 is UDP. Telnet will never work.
why are packets not reaching the radius server even though it pings from the switch?
You have a firewall on the network or on the RADIUS server, or a switch ACL which is blocking UDP packets.
been working for years on this server and i never remembered that it has a firewall, ... the Biden effect... had to change: aaa authorization exec default group TEST group UP if-authenticated to: aaa authorization exec default group UP if-authenticated so the radius authorizes! now i want to use /etc/passwd for usernames, but i read in the documentation from 19 years ago, so i don't think it is relevant, anyone has a clear how to in order to implement this?