NAS clients ignored...not sure where to go
Hi, I am fairly new to configuring FreeRADIUS, and have had to add some new clients to communicate with my RADIUS server. I don't think, that we use the clients.conf, but rather edit vi mysql-unless I'm missing something, but other clients aren't in that file. So here is what I configured: +----+---------------+---------------+-------+-------+--------+--------+-----------+----------------+ | id | nasname | shortname | type | ports | secret | server | community | description | +----+---------------+---------------+-------+-------+--------+--------+-----------+----------------+ | 30 | 172.26.248.41 | 172.26.248.41 | other | NULL | secret | NULL | NULL | mvs.bgan-burum | | 31 | 172.26.248.42 | 172.26.248.42 | other | NULL | secret | NULL | NULL | mvs.bgan-burum | | 32 | 172.26.248.43 | 172.26.248.43 | other | NULL | secret | NULL | NULL | mvs.bgan-burum | | 33 | 172.26.248.44 | 172.26.248.44 | other | NULL | secret | NULL | NULL | mvs.bgan-burum | | 34 | 172.26.248.45 | 172.26.248.45 | other | NULL | secret | NULL | NULL | mvs.bgan-burum | | 35 | 172.26.248.46 | 172.26.248.46 | other | NULL | secret | NULL | NULL | mvs.bgan-burum | +----+---------------+---------------+-------+-------+----------------+--------+-----------+--------+ Then, when I try to authenticate a device I get: Mon Mar 10 20:16:19 2014 : Error: Ignoring request to authentication address RADIUS_IP port 1812 from unknown client 172.26.248.41 port 54898 Mon Mar 10 20:28:02 2014 : Error: Ignoring request to authentication address RADIUS_IP port 1812 from unknown client 172.26.248.42 port 52687 Mon Mar 10 20:28:05 2014 : Error: Ignoring request to authentication address RADIUS_IP port 1812 from unknown client 172.26.248.42 port 52687 I have made sure that the secret is correct and not including any white space, but I don't know why this is happening. Thanks in advance for some direction. Regards, Ryan Milton c: 862-249-5230
Ryan Milton wrote:
Hi, I am fairly new to configuring FreeRADIUS, and have had to add some new clients to communicate with my RADIUS server.
I don’t think, that we use the clients.conf, but rather edit vi mysql—unless I’m missing something, but other clients aren’t in that file.
You should check that the server is reading clients from SQL. See the "readclients" configuration in the SQL module. Also, run th eserver in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list. It will SHOW the list of clients it's reading from SQL. If it doesn't... it's not reading clients from SQL.
Then, when I try to authenticate a device I get:
Mon Mar 10 20:16:19 2014 : Error: Ignoring request to authentication address RADIUS_IP port 1812 from unknown client 172.26.248.41 port 54898
Which isn't the debug output. PLEASE use "radiusd -X" for debugging. Doing anything else is wasting your time, and ours. Alan DeKok.
Either the server isn't reading the clients from SQL (check via debug) or you haven't restarted the server since adding the clients. If you want to use live SQL additions then you'll need to enable the dynamic clients virtual server Alan
participants (3)
-
Alan Buxey -
Alan DeKok -
Ryan Milton