Radclient COA - sending Cisco non-AVpair attributes
Hi, I'm trying to do an account-logon to a cisco ISG (aka NAS). I've created a file to carry the attributes. The file looks like this.. User-Name += "jane" Service-Type = Outbound-User cisco-command-code=01 cisco-avpair = "ssg-account-info=S10.174.168.2:294", Here's the command I sent. Radclient x f /home/admin/coa_file 10.172.168.6:3799 coa testing123 The debug from radclient doesn't show any errors. It shows Cisco-Command-Code = "01" Here's the debug from the cisco router. Nov 6 22:40:03.489: RADIUS/DECODE: Reply-Message fragments, 13, total 13 bytes Nov 6 22:43:43.542: RADIUS: COA received from id 164 10.194.170.150:43374, CoA Request, len 84 Nov 6 22:43:43.542: RADIUS/ENCODE(00000000):Orig. component type = Invalid Nov 6 22:43:43.542: RADIUS/ENCODE: Skip encoding 0 length AAA attribute formatted-clid Nov 6 22:43:43.543: RADIUS(00000000): sending Nov 6 22:43:43.543: RADIUS(00000000): Send CoA Nack Response to 10.194.170.150:43374 id 164, len 120 Nov 6 22:43:43.543: RADIUS: authenticator 00 37 CB 5E 01 05 D8 08 - 3F 8F EA 3D 09 88 E4 8F Nov 6 22:43:43.543: RADIUS: User-Name [1] 6 "jane" Nov 6 22:43:43.543: RADIUS: Service-Type [6] 6 Outbound [5] Nov 6 22:43:43.543: RADIUS: Vendor, Cisco [26] 29 Nov 6 22:43:43.543: RADIUS: Cisco AVpair [1] 23 "service-type=Outbound" Nov 6 22:43:43.543: RADIUS: Vendor, Cisco [26] 10 Nov 6 22:43:43.543: RADIUS: ssg-command-code [252] 4 Nov 6 22:43:43.543: RADIUS: 30 31 [Unknown 01] Nov 6 22:43:43.543: RADIUS: Vendor, Cisco [26] 25 Nov 6 22:43:43.543: RADIUS: ssg-account-info [250] 19 "S10.174.168.2:294" Nov 6 22:43:43.543: RADIUS: Reply-Message [18] 18 Nov 6 22:43:43.543: RADIUS: 4E 6F 20 76 61 6C 69 64 20 53 65 73 73 69 6F 6E [ No valid Session] Nov 6 22:43:43.543: RADIUS: Dynamic-Author-Error[101] 6 Unsupported Service [405] As you can see it's translating the command code from decimal to hex. How do I specify the command code to be hex? (I've tried 0x01 but again it converts the ascii to hex) Also, is there documentation that explains the syntax to be used in the attribute file? Thanks, Steve
Steve Schubert wrote:
The debug from radclient doesn't show any errors.
It shows Cisco-Command-Code = "01"
That's what you told it to send.
As you can see it's translating the command code from decimal to hex.
No. You told radclient to send an ASCII string composed of the characters "0" and "1". That's what it did.
How do I specify the command code to be hex? (I've tried 0x01 but again it converts the ascii to hex)
The Cisco-Command-Code attribute is defined to be a printable string. So sending a hex byte of 0x01 is probably not what you want. But... it should be possible. Just do: Cisco-Command-Code = 0x01
Also, is there documentation that explains the syntax to be used in the attribute file?
$ man unlang or $ man users It's the same format. Alan DeKok.
participants (2)
-
Alan DeKok -
Steve Schubert