Duplicate entries and incorrect accounting and authorization (Cont'd)
Basically I've got duplicate entries in radpostauth, no entries in radacct and the NAS does not recognize the successful authentication even though from the radius server point of view it seems to get authentication right.
Then either the reply is coming from an IP that the NAS doesn't like, or the shared secret is wrong.
Once you get the NAS to accept the response from the server, the duplicate entries in will disappear, and accounting will start.
I suggest using 'tcpdump' on the network to see what's going on with the RADIUS packets. Look at src/dst IP's...
Alan DeKok.
Alan, Thank you for your response. As you pointed out, by watching tcpdump outcome I see no Radius Responses coming back to the NAS (I do see Radius Requests going out the NAS though). The shared secret is fine and I use chillispot with the right configuration (pointing at the right radius server). Also, I did not introduce any changes at the NAS side from my previous working version. All changes were introduced at the Radius server side. Any more suggestions? Thanks again, -Bill Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485
<bdab@hushmail.com> wrote:
Thank you for your response. As you pointed out, by watching tcpdump outcome I see no Radius Responses coming back to the NAS (I do see Radius Requests going out the NAS though). The shared secret is fine and I use chillispot with the right configuration (pointing at the right radius server). Also, I did not introduce any changes at the NAS side from my previous working version. All changes were introduced at the Radius server side. Any more suggestions?
You have a firewall on the RADIUS server that's blocking outgoing packets. Or, the packets are going somewhere else. Alan DeKok.
participants (2)
-
Alan DeKok -
bdab＠hushmail.com