NAS-IP-Address = *[IP address unknown, not corresponding to NAS interfaces] * Did you added your F5 IP address to NAS Table ? Regards Suman * On Mon, Oct 17, 2011 at 4:56 PM, Vincent, Fabien <fabien.vincent@coreye.fr>wrote:
Dear all,****
** **
I’m using Radius for authenticating admin users on different network equipments. “group authorize {...}” works fine with rlm_ldap and group management.****
** **
But I have some problem for accounting on F5 BigIP LTM / GTM.****
** **
In fact, my radius accounting server is receiving accounting-request like this :****
** **
Accounting-Request packet from host 10.10.10.10 port 36875, id=29, length=281****
NAS-IP-Address = *[IP address unknown, not corresponding to NAS interfaces]*****
F5-Attr-14 = *[Hexa decimal output starting with 0x …]*****
WARNING: Empty section. Using default return values.****
+- entering group accounting {...}****
[sql] expand: packet has no accounting status type. [user '%{User-Name}', nas '%{NAS-IP-Address}'] -> packet has no accounting status type. [user '', nas '*[nas IP unknown]*']****
[sql] packet has no accounting status type. [user '', nas '*[nas IP unknown]*']****
++[sql] returns invalid****
Finished request 37.****
Cleaning up request 37 ID****
** **
Did someone here already use accounting with F5 BigIP LTM or GTM ? I’m looking to make this working by changing audit_forward TCL script provided with F5 (syslog-ng) but I wasn’t able to produce something different …****
** **
I also tried to edit the dictionnary for F5 in * /usr/share/freeradius/dictionary.f5*
*ATTRIBUTE F5-LTM-User-Info-1 12 string*
*ATTRIBUTE F5-LTM-User-Info-2 13 string*
*++ ATTRIBUTE F5-Attr-14 14 octets*
** **
Thanks in advance for your help !****
** **
*Fabien VINCENT*****
fabien.vincent@coreye.fr****
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html