Hello gurus. Is me again :), trying to authenticate local users to the switch through freeradius 2.0.5, but no success with 3Com 4500/5500. My users file has: admin Cleartext-Password := "XXXXX" Framed-IP-Address = "%{Framed-IP-Address}", 3Com-User-Access-Level = 3Com-Administrator, Reply-Message = "Hola usuario, %{User-Name}" radiusd -X shows this, as you can see i'm getting the access-accept message: rad_recv: Access-Request packet from host 192.168.100.246 port 5001, id=72, length=204 User-Name = "admin" User-Password = "XXXXX" NAS-IP-Address = 192.168.100.246 NAS-Identifier = "001cc53e1b02" NAS-Port = 16809985 NAS-Port-Id = "unit=1;subslot=0;port=8;vlanid=1" NAS-Port-Type = Ethernet Service-Type = Login-User Login-IP-Host = 192.168.100.246 Calling-Station-Id = "0000-0000-0000" Framed-IP-Address = 192.168.100.241 H3C-Connect_Id = 72 H3C-Product-ID = "4500" H3C-Ip-Host-Addr = "192.168.100.241 00:00:00:00:00:00" H3C-NAS-Startup-Timestamp = 954633321 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "admin", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry admin at line 220 expand: %{Framed-IP-Address} -> 192.168.100.241 expand: Hola usuario, %{User-Name} -> Hola usuario, admin ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "XXXXX" rlm_pap: Using clear text password "XXXXX" rlm_pap: User authenticated successfully ++[pap] returns ok +- entering group post-auth ++[exec] returns noop Sending Access-Accept of id 72 to 192.168.100.246 port 5001 Framed-IP-Address = 192.168.100.241 3Com-User-Access-Level = 3Com-Administrator Reply-Message = "Hola usuario, admin" Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 72 with timestamp +15 Ready to process requests. The switch shows me this: debugging radius packet terminal debugging *0.683215396 4500 RDS/8/DEBUG:- 1 -Recv MSG,[MsgType=Normal auth request Index = 72, ulParam3=2185152212] *0.683215397 4500 RDS/8/DEBUG:- 1 -Send attribute list: *0.683215398 4500 RDS/8/DEBUG:- 1 - [1 User-name ] [7 ] [admin] [2 Password ] [18] [B9CE88BA96205FBFF301351E5ED4A8C5] [4 NAS-IP-Address ] [6 ] [192.168.100.246] [32 NAS-Identifier ] [14] [001cc53e1b02] [5 NAS-Port ] [6 ] [16809985] [87 NAS_Port_Id ] [34] [unit=1;subslot=0;port=8;vlanid=1] *0.683215399 4500 RDS/8/DEBUG:- 1 - [61 NAS-Port-Type ] [6 ] [15] [3com-26 Connect_ID ] [6 ] [72] [6 Service-Type ] [6 ] [1] [14 Login-Host ] [6 ] [192.168.100.246] [31 Caller-ID ] [16] [303030302D303030302D30303030] [8 Framed-Address ] [6 ] [192.168.100.241] *0.683215400 4500 RDS/8/DEBUG:- 1 - [3com-255Product-ID ] [6 ] [4500] [3com-60 Ip-Host-Addr ] [35] [192.168.100.241 00:00:00:00:00:00] [3com-59 NAS-Startup-Timestamp ] [6 ] [954633321] *0.683215401 4500 RDS/8/DEBUG:- 1 -Send: IP=[192.168.100.91], UserIndex=[72], ID=[72], RetryTimes=[0], Code=[1], Length=[204] *0.683215401 4500 RDS/8/DEBUG:- 1 -Send Raw Packet is: *0.683215402 4500 RDS/8/DEBUG:- 1 - 01 48 00 cc e4 54 00 00 e7 22 00 00 b1 26 00 00 29 3b 00 00 01 07 61 64 6d 69 6e 02 12 b9 ce 88 ba 96 20 5f bf f3 01 35 1e 5e d4 a8 c5 04 06 c0 a8 64 f6 20 0e 30 30 31 63 63 35 33 65 31 62 30 32 05 06 01 00 80 01 57 22 75 6e 69 74 3d 31 3b 73 75 62 73 6c 6f 74 3d 30 3b 70 6f 72 74 3d 38 3b 76 6c 61 6e 69 64 3d 31 3d 06 00 00 00 0f 06 06 00 00 00 01 0e 06 c0 a8 64 f6 1f 10 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 08 06 c0 a8 64 f1 1a 3b 00 00 63 a2 1a 06 00 00 00 48 ff 06 34 35 30 30 3c 23 31 39 32 2e 31 36 38 2e 31 30 30 2e 32 34 31 20 30 30 3a 30 30 3a 30 30 3a 30 30 3a 30 30 3a 30 30 3b 06 38 e6 8c 69 *0.683215413 4500 RDS/8/DEBUG:- 1 -Recv MSG,[MsgType=PKT response Index = 59, ulParam3=2182466612] *0.683215414 4500 RDS/8/DEBUG:- 1 -Receive Raw Packet is: *0.683215415 4500 RDS/8/DEBUG:- 1 - 02 48 00 3b 22 a0 e3 77 89 0b 9f f0 0f 82 02 71 a6 81 7b 68 08 06 c0 a8 64 f1 1a 0c 00 00 00 2b 01 06 00 00 00 03 12 15 48 6f 6c 61 20 75 73 75 61 72 69 6f 2c 20 61 64 6d 69 6e *0.683215416 4500 RDS/8/DEBUG:- 1 -Receive:IP=[192.168.100.91],Code=[2],Length=[59] *0.683215417 4500 RDS/8/DEBUG:- 1 - [8 Framed-Address ] [6 ] [192.168.100.241] [3com-1 User_Access_Level ] [6 ] [3] [18 Reply-Message ] [21] [Hola usuario, admin] Has anybody done this?, should i sent something else on the reply? Best regards. Oxiel __________________________________________________ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! Regístrate ya - http://correo.yahoo.es