setup freeradius to generateng COA
Hi, I am trying to setup freeradius to generateng COA after receiving Access-Request packets. Is there any document on how to configure this setting? It seems I am sending Accounting packet to authorization port: After sending ... echo "User-Name=test,User-Password=abc123" | /usr/local/bin/radclient -x localhost:11812 coa testing1234 I got the following debug log: Listening on authentication address * port 11812 Listening on accounting address * port 11813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 11814 Ready to process requests. Invalid packet code 43 sent to authentication port from client localhost port 34917 : IGNORED Ready to process requests. Invalid packet code 43 sent to authentication port from client localhost port 34917 : IGNORED Ready to process requests. Invalid packet code 43 sent to authentication port from client localhost port 34917 : IGNORED Ready to process requests. Thanks, ASM
Hi, look in sites-available read the 'coa' virtual server.... enable it (link it from sites-enabled or copy) - then run the server. CoA , be default is on port 3799 ... alan
Hi, I have setup 'coa' virtual sever and enabled it. Freeradius is not listening on port 3799. However, I was wondering how can I make Freeradius to "originate" a COA message? When using the following example, Freeradius is simply replaied back with a CoA-NAK message. echo "Cisco-Account-Info='S10.1.1.1:2813',Cisco-Command-Code='\004 &'" | /usr/local/bin/radclient -x 10.10.10.1 coa testing123 What I am looking is how to make Freeradius to "originate" a COA message using radclient or radtest. Thanks, ASM
Date: Mon, 17 Oct 2011 16:01:21 +0100 From: A.L.M.Buxey@lboro.ac.uk To: freeradius-users@lists.freeradius.org Subject: Re: setup freeradius to generateng COA
Hi,
look in sites-available read the 'coa' virtual server.... enable it (link it from sites-enabled or copy) - then run the server. CoA , be default is on port 3799 ...
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alex rsm wrote:
I have setup 'coa' virtual sever and enabled it. Freeradius is not listening on port 3799. However, I was wondering how can I make Freeradius to "originate" a COA message?
raddb/sites-available/originate-coa
When using the following example, Freeradius is simply replaied back with a CoA-NAK message.
echo "Cisco-Account-Info='S10.1.1.1:2813',Cisco-Command-Code='\004 &'" | /usr/local/bin/radclient -x 10.10.10.1 coa testing123
What I am looking is how to make Freeradius to "originate" a COA message using radclient or radtest.
This is documented. You don't need radclient. Alan DeKok.
Hi, FreeRadius not originating COA message due to the following error in the debug: rad_recv: Access-Request packet from host 10.10.10.1 port 35664, id=254, length=43 User-Name = "test" User-Password = "abc123" # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default .... .... Sending Access-Accept of id 254 to 10.10.10.1 port 35664 WARNING: Unknown destination 10.10.10.1:3799 for CoA request. Do CoA Fail handler here Is there any place I need to configure the COA destination? Thanks, ASM
Date: Wed, 19 Oct 2011 16:46:33 +0200 From: aland@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: setup freeradius to generateng COA
Alex rsm wrote:
I have setup 'coa' virtual sever and enabled it. Freeradius is not listening on port 3799. However, I was wondering how can I make Freeradius to "originate" a COA message?
raddb/sites-available/originate-coa
When using the following example, Freeradius is simply replaied back with a CoA-NAK message.
echo "Cisco-Account-Info='S10.1.1.1:2813',Cisco-Command-Code='\004 &'" | /usr/local/bin/radclient -x 10.10.10.1 coa testing123
What I am looking is how to make Freeradius to "originate" a COA message using radclient or radtest.
This is documented. You don't need radclient.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alex rsm wrote:
FreeRadius not originating COA message due to the following error in the debug:
rad_recv: Access-Request packet from host 10.10.10.1 port 35664, id=254, length=43 User-Name = "test" User-Password = "abc123" # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default .... .... Sending Access-Accept of id 254 to 10.10.10.1 port 35664 WARNING: Unknown destination 10.10.10.1:3799 for CoA request. Do CoA Fail handler here
Is there any place I need to configure the COA destination?
Yes. Read raddb/sites-available/originate-coa This is documented. I said that in my previous message. Did you read it? If you did, you already know how to solve the problem. If you didn't read it, you're being rude by ignoring the people who try to help you. Alan DeKok.
Yes, I read it and followed the instructions: added update coa statement in my default config. update coa { User-Name = "%{User-Name}" Acct-Session-Id = "%{Acct-Session-Id}" NAS-IP-Address = "%{NAS-IP-Address}" } Based on the following docs, it should sends COA to my NAS-IP but it doesn't: # The default destination of a CoA packet is the NAS (or client) # the sent the original Access-Request or Accounting-Request. See # raddb/clients.conf for a "coa_server" configuration that ties # a client to a specific home server, or to a home server pool.
Date: Wed, 19 Oct 2011 22:42:38 +0200 From: aland@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: setup freeradius to generateng COA
Alex rsm wrote:
FreeRadius not originating COA message due to the following error in the debug:
rad_recv: Access-Request packet from host 10.10.10.1 port 35664, id=254, length=43 User-Name = "test" User-Password = "abc123" # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default .... .... Sending Access-Accept of id 254 to 10.10.10.1 port 35664 WARNING: Unknown destination 10.10.10.1:3799 for CoA request. Do CoA Fail handler here
Is there any place I need to configure the COA destination?
Yes. Read raddb/sites-available/originate-coa
This is documented.
I said that in my previous message. Did you read it? If you did, you already know how to solve the problem. If you didn't read it, you're being rude by ignoring the people who try to help you.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alex rsm wrote:
Yes, I read it and followed the instructions:
If you had, it would work.
Based on the following docs, it should sends COA to my NAS-IP but it doesn't:
You need to KEEP READING THE DOCUMENT. Look for "home_server". You need to configure that, too. Honestly... when you use google maps for directions, it can give you 3-4 steps to follow. Do you stop after the first step, and complain "I followed the instructions, but I'm not at my destination!" Read ALL of the document. I keep saying "READ THE DOCUMENT" because I really mean that you should READ THE DOCUMENT. If you post another message which makes it clear you haven't read the document, you can be unsubscribed from the list. You're being rude, and that's not acceptable. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Alex rsm