On Thu, Nov 14, 2019 at 3:19 PM Vyzdura Tomas <Tomas.Vyzdura@vviss.cz> wrote:
I can get the request, and in freeradius debuglog I see it is processed and it even shows Sent Access-Accept but it looks like the server doesn’t send the actual packet – when monitoring with tcpdump I can see only ARP packets sent to the IP address from where the request came.
Looks like network issue.
When testing from another machine with same user/password on our network it works – I get authenticated and receive IP address in the response. I also see radius sending packet in tcpdump. There is no firewall on the server
(0) Sent Access-Accept Id 60 from 10.10.10.75:1812 to 10.10.10.241:37488 length 0 (0) Framed-IP-Address = 10.10.104.1 (0) Service-Type = Framed-User (0) Finished request
Try these things: - are you running tcpdump on the correct interface? - can you ping 10.10.10.241? or connect to some open ports there (e.g it might have ssh open) - try running 'ip r'. Does it show a specific route for 10.10.10.241? There can be cases where an app (e.g. FR) can receive and send udp packet to a host, but it never even got to the correct interface. In which case ping or other connectivity test should fail as well. -- Fajar