Re: Problem with proxy-radius function
What I can say .. root@aaa:/var/log/radius# tcpdump -i eth0 host X.X.X.X 12:38:19.725549 IP aaa.copy.net.1094 > X.X.X.X.1646: RADIUS, Accounting Request (4), id: 0xca length: 387 12:38:19.725660 IP aaa.copy.net.1094 > X.X.X.X.1646: RADIUS, Accounting Request (4), id: 0xa8 length: 589 12:38:19.726122 IP aaa.copy.net.1094 > X.X.X.X.1646: RADIUS, Accounting Request (4), id: 0x26 length: 571 12:38:19.726298 IP aaa.copy.net.1094 > X.X.X.X.1646: RADIUS, Accounting Request (4), id: 0x82 length: 589 12:38:19.755292 IP X.X.X.X.1646 > aaa.copy.net.1094: RADIUS, Accounting Response (5), id: 0xca length: 24 12:38:19.755297 IP X.X.X.X.1646 > aaa.copy.net.1094: RADIUS, Accounting Response (5), id: 0xa8 length: 24 12:38:19.758275 IP X.X.X.X.1646 > aaa.copy.net.1094: RADIUS, Accounting Response (5), id: 0x82 length: 24 12:38:19.761917 X.X.X.X.1646 > aaa.copy.net.1094: RADIUS, Accounting Response (5), id: 0x26 length: 24 Looks like traffic goes between port 1094(my side - different time different) and 1646 Is It correct? I thing it should be between port 1813 and 1646 ... Is It because listen { ipaddr = my.ip.addres port = 0 type = acct } ? P.S On website http://www.freeradius.org/getting.html Link to daily snapshot not work. ftp://ftp.freeradius.org/pub/radius/CVS-snapshots/ ----- Original Message ---- From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Friday, April 11, 2008 12:23:10 PM Subject: Re: Problem with proxy-radius function banga wrote:
AnyOne?
Error: Rejecting request 20696 due to lack of any response from home server X.X.X.X port 1646 Error: Ignoring request from unknown home server X.X.X.X port 1646 How I can fix that ?
I think what's happening is that the home server is sending the response from the wrong port. You would have to show *more* of the debug log to be sure. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Ivan Popov wrote:
What I can say .. root@aaa:/var/log/radius <mailto:root@aaa:/var/log/radius># tcpdump -i eth0 host X.X.X.X
<sigh> While this is interesting, you were asked for debugging output.
Is It correct? I thing it should be between port 1813 and 1646 ...
The traffic looks OK. There may be something else going wrong, and the debug output may show it. Is it possible to run the server in debug mode? If not, why? Alan DeKok.
Hi,
P.S On website http://www.freeradius.org/getting.html Link to daily snapshot not work. ftp://ftp.freeradius.org/pub/radius/CVS-snapshots/
just grab the CVS directly as per the info on http://www.freeradius.org/download.html then it wont be as stale - the FTP snapshots may be up to 24 hours old - and therefore older than the 'i just fixed it' emails. alan
participants (3)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Ivan Popov