Re: Re: No accounting Freeradius + EAP/PEAP/TLS
Hi Ivan, The Zinwell manual didn't say anything about enabling account. My Freeradius is configured with default values, only things I changed was to use EAP/PEAP and freeradius, at radius database I configured tables NAS, Usergroup, radcheck ang groupreply(Auth-Type:=EAP). Could you tell me thar have to be another think at GroupReply and suggest some nas devices? Thanks.
Date: Thu, 12 Mar 2009 00:11:44 +0100 From: <tnt@kalik.net> Subject: Re: Re: No accounting Freeradius + EAP/PEAP/TLS To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <9kef2EDk.1236813104.0870720.tnt@kalik.net> Content-Type: text/plain; charset=ISO-8859-2
I used wireshark and didn't see anything referred about Account Packages. Only thing I see is Radius-Access Resquest, Access Challenges and Access Accept.
So read Zinwell documentation about enabling accounting.
Ivan Kalik Kalik Informatika ISP
_________________________________________________________________ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx
Hi,
The Zinwell manual didn't say anything about enabling account. My Freeradius is configured with default values, only things I changed was to use EAP/PEAP and freeradius, at radius database I configured tables NAS, Usergroup, radcheck ang groupreply(Auth-Type:=EAP).
if it doesnt mention it, how do you know it can do it? you're only real choice is to sniff ALL the traffic on the wire from the zinwell and see what the heck its sending. if it doesnt send any accounting then theres nothing magical that FreeRADIUS (or any other RADIUS server) can do - as the RADIUS server doesnt tell the NAS to 'oi, send me stuff!' - the NAS is configured to do accounting and then where to send it. if its good, the NAS sends accounting packets as per the RFCs.....but from personal experience 90% of devices out there break accounting in wierd and wonderful ways..be it cisco, hp, 3com, zyxel, hauwei etc. once you DO get accounting packets to the RADIUS server, then thats when the real fun begins! ("oh, but i wanted unique per client sessions that could be matched to the real user!" argggh! ;-) ) alan
Leonardo Mártyres wrote:
The Zinwell manual didn't say anything about enabling account.
Then it doesn't do accounting. Nothing you do to FreeRADIUS will make the Zinwell machine send accounting packets. Throw the Zinwell box in the garbage, and buy an access point that has the features you need. Alan DeKok.
The Zinwell manual didn't say anything about enabling account.
Well, there is nothing you can do on the radius server to make AP send accounting.
My Freeradius is configured with default values, only things I changed was to use EAP/PEAP and freeradius, at radius database I configured tables NAS, Usergroup, radcheck
Fine.
ang groupreply(Auth-Type:=EAP).
Oh, dear. Why? First thing written in eap.conf is: # Whatever you do, do NOT set 'Auth-Type := EAP'.
Could you tell me thar have to be another think at GroupReply and suggest some nas devices?
I am not the one to ask about wireless. Ivan Kalik Kalik Informatika ISP
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Leonardo Mártyres -
tnt＠kalik.net