freeradius server and PPP
Hello, I have in my LAN an access controller Colubris CN3200 (IP : 192.168.10.80), router (gw) IP : 192.168.10.1/80.x.x.x, and I authenticate it on a remote radius server (IP 63.x.x.x). In server side i have this (radiusd -X) : rad_recv: Access-Request packet from host 80.x.x.x:10901, id=64, length=251 Acct-Session-Id = "7592eefb" NAS-Port = 0 NAS-Port-Type = Wireless-802.11 User-Name = "noven-ac1" Calling-Station-Id = "00-03-52-01-FC-33" Called-Station-Id = "00-03-52-01-FC-33" Framed-IP-Address = 192.168.1.1 User-Password = "novenac1" NAS-Identifier = "noven.Vincennes.0" NAS-IP-Address = 192.168.10.81 Framed-MTU = 1496 Connect-Info = "HTTPS" Service-Type = Administrative-User WISPr-Location-Name = "noven.Noven-WiFi" WISPr-Location-ID = "noven2/Noven-WiFi" Message-Authenticator = 0xa4619c3e1b4b1f7f5a877de95f208ab0 Processing the authorize section of radiusd.conf ..... ...... Sending Access-Accept of id 64 to 80.x.x.x:10901 Framed-Protocol := PPP Service-Type := Framed-User Framed-MTU := 1500 Colubris-AVPair += "transport-page=https://192.168.10.82/Noven/transport.html" Colubris-AVPair += "session-page=https://192.168.10.82/Noven/session.html" ........ My problem is that the response from the radius server does not reach my AC (IP 192.168.10.81) although the answer was indeed turned over to my router (IP : 80.x.x.x) !!! Perhaps I need to install a PPP or PPPoE server ? I have no idea ... Someone can help me ? Please Thanks; Moustapha Maouloud --------------------------------- Avez-vous essayé le nouveau Yahoo! Mail ? Plus rapide, plus efficace... simplement révolutionnaire ! Découvrez-le.
Moustapha Ould Maouloud <taphas@yahoo.fr> wrote:
My problem is that the response from the radius server does not reach my AC (IP 192.168.10.81) although the answer was indeed turned over to my router (IP : 80.x.x.x) !!!
The packet dump you quoted shows that the RADIUS packet is being sent to 80.x.x.x, not 192.168.10.81. I have no idea why you think the RADIUS packet would be sent to 192.168.10.81, RADIUS doesn't work that way. Alan DeKok.
Moustapha Ould Maouloud <taphas@yahoo.fr> wrote:
My problem is that the response from the radius server does not reach my AC (IP 192.168.10.81) although the answer was indeed turned over to my router (IP : 80.x.x.x) !!!
The packet dump you quoted shows that the RADIUS packet is being sent to 80.x.x.x, not 192.168.10.81. I have no idea why you think the RADIUS packet would be sent to 192.168.10.81, RADIUS doesn't work that way.
I think his Access Controller is natted between his router's external IP address. Since his radius server is outside (somewhere on the Internet), it can only reply to his router's external IP address. It is then up to the router to translate the IP address to match the internal private Ip address of the Access Controller: and it seems that the problem is on the router side only. I've sent him a little things to check on his router offlist since it's not, as far as I know, a freeradius problem... unless someone has some Radius specific recommendations when NAT is involved between the AC and the Radius server... thibault
participants (3)
-
Alan DeKok -
Moustapha Ould Maouloud -
Thibault Le Meur