I have not had any issues with 2.5 though 3.0 is giving me fits. Your eap configuration looks ok, check sites-available/inner-tunnel and make sure you have all of the wimax entries uncommented. David -----Original Message----- From: Anup krishnan A [mailto:anupkris@cdactvm.in] Sent: Wednesday, October 06, 2010 8:07 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: RE: WiMax VSA Support Hi David, 1) You have to configure the radius server to use the inner-tunnel. Following are the entries in the eap.conf file. ttls { default_eap_type = md5 copy_request_to_tunnel = yes use_tunneled_reply = yes virtual_server = "inner-tunnel" } I hope this is what you meant by configure inner-tunnel in radius server. Actually, the FreeRadius server is sending the Access-Accept with all WiMAX Attributes for the user as we have given in the "users" file. But I think the Alvarion ASN Gateway is not handling or recognizing what we are sending 2) Which version of the 4-Motion software are you using on your system? We are using 4motion Release 2.5M1. Regards Anup
Anup,
You have to configure the radius server to use the inner-tunnel. Which version of the 4-Motion software are you using on your system?
David
-----Original Message----- From: freeradius-users-bounces+david.peterson=acc-corp.net@lists.freeradius. freeradius-users-bounces+org [mailto:freeradius-users-bounces+david.peterson=acc-corp.net@lists.fre eradiu s.org] On Behalf Of Anup krishnan A Sent: Wednesday, October 06, 2010 4:11 AM To: FreeRadius users mailing list Subject: Re: WiMax VSA Support
Hi Alan,
Thank you for your quick response.
We have already checked the dictionary and found that wimax dictionary is available in the freeradius server.
Actually we are using Freeradius server 2.1.9 and Alvarion base-station and Alvarion ASN GW. Initially we created a service profile in Alvarion ASN GW for the user "test" using their management software 'AlvariStar'. And 'users' file in the freeradius has been updated to add the user "test" as follows,
test Cleartext-Password := "test" Auth-Type = Local, Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 192.168.0.33, Framed-IP-Netmask = 255.255.255.0, Framed-Routing = Broadcast-Listen, Filter-Id = "servprof2"
where "servprof2" is the name of the service profile created in Alvarion ASN GW. In this case the authentication was successful and MS has got the IP as well.
Then we tried to create the service profile for the user "test" from the Freeradius by using WiMAX attributes found in the file dictionary.wimax'.The entries for the user in the 'users' file is as shown below.
test Cleartext-Password := "test" Auth-Type = Local, Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 192.168.0.33, Framed-IP-Netmask = 255.255.255.0, WiMAX-Service-Profile-Id=1, WiMAX-Media-Flow-Type=Streaming-Video, WiMAX-Schedule-Type = Best-Effort, WiMAX-QoS-Id=01, WiMAX-Media-Flow-Type=Robust-Browser, WiMAX-Traffic-Priority=0, WiMAX-Maximum-Sustained-Traffic-Rate=512000
In this case Freeradius has sent the Access-Accept, but the authentication process is not successful and MS is showing an error message as "EAP supplicant transferring error".
I hope you understand the problem
Regards, Anup
Anup wrote:
Hi, I would like to know whether latest Freeradius version has the support for WiMax VSAs?
The server comes with documentation and dictionary files. Please read them.
Also please tell me how to send the WiMAX Qos Descriptors in Access-Accept
VSAs are just attributes. They can be added / edited like anything else.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
----------------------------------------- This email was sent using SquirrelMail. "Webmail for nuts!" http://squirrelmail.org/
______________________________________ Scanned and protected by Email scanner - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
----------------------------------------- This email was sent using SquirrelMail. "Webmail for nuts!" http://squirrelmail.org/ ______________________________________ Scanned and protected by Email scanner