understanding NAS and accounting packets
Hi all, I am using freeradius server on my AWS. Freeradius version : 2.2.8 on 64bit system installed it via package manager. I have tried to go through a few times over the online present materials for freeradius but still I am not able to wrap my head around NAS. Here is my picture & current understanding: *Wireless AP* : D link 850l ; WPA-enterprise is only on 5 GHz band. The router firmware gives me this flexibility to put different security provisions on 2.4 and 5.0 GHz spectrum. AWS instance : *freeradius* server running. radtest output is correct as I can see by username and password being authenticated by access-accept response. 1. One of my node i.e laptop/mobile phone tries to connect to my wireless access point at 5.0 GHz. 2. I recieve packets at my freeradius server as I see it by running with -X swtich. 3. Successfull authentication is done and my device is connected. The problem arises for me when there occurs no accounting packets, the radacct table is empty all along. As what I think I understand by reading materails over internet, it seems like NAS sends this which I probably was considering my router to be. Is my d-link 850l is NAS? or I am getting it all wrong? There are no accounting packets, I checked it with radsniff. I am attaching a very big output response from my free-radius output. Initial few attempts are done while I tried connecting from my android phone to wireless AP with wrong credentials. Line number 1890 is when I sent request with correct credentials. Also, attaching my default file under sites-enabled/. I understand that I am here asking two things but I guess thats how I come to know about the problem. Let me know if any other outputs or logs are required. -- Regards, saurabh shandilya www.embedded4fun.com https://in.linkedin.com/in/shandilyasaurabh
Your wireless device (the dlink) is the NAS. If you're not seeing accounting packets at the RADIUS server then 1 can NAS do accounting? 2 is NAS configured to send packets? 3 acct is on UDP port 1813 , is that open and accessible on your AWS instance and OS? 4 is accounting listener enabled/configured on your FreeRADIUS server? alan On 20 Jun 2017 9:37 pm, "Saurabh Shandilya" <saurabhshandilya.1991@gmail.com> wrote:
Hi all,
I am using freeradius server on my AWS. Freeradius version : 2.2.8 on 64bit system installed it via package manager.
I have tried to go through a few times over the online present materials for freeradius but still I am not able to wrap my head around NAS.
Here is my picture & current understanding:
*Wireless AP* : D link 850l ; WPA-enterprise is only on 5 GHz band. The router firmware gives me this flexibility to put different security provisions on 2.4 and 5.0 GHz spectrum.
AWS instance : *freeradius* server running. radtest output is correct as I can see by username and password being authenticated by access-accept response.
1. One of my node i.e laptop/mobile phone tries to connect to my wireless access point at 5.0 GHz. 2. I recieve packets at my freeradius server as I see it by running with -X swtich. 3. Successfull authentication is done and my device is connected.
The problem arises for me when there occurs no accounting packets, the radacct table is empty all along. As what I think I understand by reading materails over internet, it seems like NAS sends this which I probably was considering my router to be.
Is my d-link 850l is NAS? or I am getting it all wrong?
There are no accounting packets, I checked it with radsniff.
I am attaching a very big output response from my free-radius output. Initial few attempts are done while I tried connecting from my android phone to wireless AP with wrong credentials. Line number 1890 is when I sent request with correct credentials.
Also, attaching my default file under sites-enabled/.
I understand that I am here asking two things but I guess thats how I come to know about the problem.
Let me know if any other outputs or logs are required. -- Regards, saurabh shandilya www.embedded4fun.com https://in.linkedin.com/in/shandilyasaurabh
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Wed, Jun 21, 2017 at 2:15 AM, Alan Buxey <alan.buxey@gmail.com> wrote:
Your wireless device (the dlink) is the NAS. If you're not seeing accounting packets at the RADIUS server then
1 can NAS do accounting? 2 is NAS configured to send packets? 3 acct is on UDP port 1813 , is that open and accessible on your AWS instance and OS? 4 is accounting listener enabled/configured on your FreeRADIUS server?
alan
Hi alan,
Thanks for your response. So the next step is to figure out as what you pointed out. 1. I don't know if my dlink 850l can do accounting. How to know that? All I can see is a routerlogin page at my router page i.e. 192.168.0.1 and I can nowhere see any sort of accounting thing. Datasheet of this doesn't say anything like this too. 2. How to configure it for sending packets ?? Is this some kind of high order functionality that we receive in hardware firewalls or some higher end routers ? 3. Yes on my aws instance, for testing purposes I have opened both the ports and I can see in the freeradius debug output that it is listening on that. Here is the output of netstat # netstat -aun Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 127.0.0.1:18120 0.0.0.0:* udp 0 0 0.0.0.0:1812 0.0.0.0:* udp 0 0 0.0.0.0:1813 0.0.0.0:* udp 0 0 0.0.0.0:1814 0.0.0.0:* udp 0 0 0.0.0.0:68 0.0.0.0:* udp 0 0 0.0.0.0:39817 0.0.0.0:* 4. Yes i have uncommented sql part in sites-enabled/default and other sections.
On 20 Jun 2017 9:37 pm, "Saurabh Shandilya" <saurabhshandilya.1991@gmail. com> wrote:
Hi all,
I am using freeradius server on my AWS. Freeradius version : 2.2.8 on 64bit system installed it via package manager.
I have tried to go through a few times over the online present materials for freeradius but still I am not able to wrap my head around NAS.
Here is my picture & current understanding:
*Wireless AP* : D link 850l ; WPA-enterprise is only on 5 GHz band. The router firmware gives me this flexibility to put different security provisions on 2.4 and 5.0 GHz spectrum.
AWS instance : *freeradius* server running. radtest output is correct as I can see by username and password being authenticated by access-accept response.
1. One of my node i.e laptop/mobile phone tries to connect to my wireless access point at 5.0 GHz. 2. I recieve packets at my freeradius server as I see it by running with -X swtich. 3. Successfull authentication is done and my device is connected.
The problem arises for me when there occurs no accounting packets, the radacct table is empty all along. As what I think I understand by reading materails over internet, it seems like NAS sends this which I probably was considering my router to be.
Is my d-link 850l is NAS? or I am getting it all wrong?
There are no accounting packets, I checked it with radsniff.
I am attaching a very big output response from my free-radius output. Initial few attempts are done while I tried connecting from my android phone to wireless AP with wrong credentials. Line number 1890 is when I sent request with correct credentials.
Also, attaching my default file under sites-enabled/.
I understand that I am here asking two things but I guess thats how I come to know about the problem.
Let me know if any other outputs or logs are required. -- Regards, saurabh shandilya www.embedded4fun.com https://in.linkedin.com/in/shandilyasaurabh
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Regards, saurabh shandilya www.embedded4fun.com https://in.linkedin.com/in/shandilyasaurabh
On Jun 20, 2017, at 4:36 PM, Saurabh Shandilya <saurabhshandilya.1991@gmail.com> wrote:
I have tried to go through a few times over the online present materials for freeradius but still I am not able to wrap my head around NAS.
Read the FreeRADIUS technical guide at: http://networkradius.com/freeradius-documentation/
Is my d-link 850l is NAS?
Yes.
There are no accounting packets, I checked it with radsniff.
Then the NAS isn't sending accounting packets.
I am attaching a very big output response from my free-radius output. Initial few attempts are done while I tried connecting from my android phone to wireless AP with wrong credentials. Line number 1890 is when I sent request with correct credentials.
Also, attaching my default file under sites-enabled/.
Please don't include that. The debug output is all we need.
Let me know if any other outputs or logs are required.
No. You need to fix the NAS so that it sends accounting packets. Alan DeKok.
On Wed, Jun 21, 2017 at 2:17 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 20, 2017, at 4:36 PM, Saurabh Shandilya < saurabhshandilya.1991@gmail.com> wrote:
I have tried to go through a few times over the online present materials for freeradius but still I am not able to wrap my head around NAS.
Read the FreeRADIUS technical guide at:
http://networkradius.com/freeradius-documentation/
Is my d-link 850l is NAS?
Yes.
There are no accounting packets, I checked it with radsniff.
Then the NAS isn't sending accounting packets.
Hi Alan, Thanks for your response. Now how to know about my NAS, as far as i know, its a very simple router Dlink 850l Hardware Version A1, Firmware 1.12WW. I mean what is the measuring axis for this to know about the kind of NAS I have and what all features it support ?
I am attaching a very big output response from my free-radius output. Initial few attempts are done while I tried connecting from my android phone to wireless AP with wrong credentials. Line number 1890 is when I sent request with correct credentials.
Also, attaching my default file under sites-enabled/.
Please don't include that. The debug output is all we need.
Let me know if any other outputs or logs are required.
No.
You need to fix the NAS so that it sends accounting packets.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Regards, saurabh shandilya www.embedded4fun.com https://in.linkedin.com/in/shandilyasaurabh
On Jun 20, 2017, at 5:23 PM, Saurabh Shandilya <saurabhshandilya.1991@gmail.com> wrote:
Now how to know about my NAS, as far as i know, its a very simple router Dlink 850l Hardware Version A1, Firmware 1.12WW. I mean what is the measuring axis for this to know about the kind of NAS I have and what all features it support ?
Ask the NAS vendor. There are a 1000 companies selling NAS equipment. Each company has 1000 products and/or firmware revisions. We can't keep track of them all. Ask the NAS vendor for documentation on how their equipment works. Alan DeKok.
On Wed, Jun 21, 2017 at 3:02 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 20, 2017, at 5:23 PM, Saurabh Shandilya < saurabhshandilya.1991@gmail.com> wrote:
Now how to know about my NAS, as far as i know, its a very simple router Dlink 850l Hardware Version A1, Firmware 1.12WW. I mean what is the measuring axis for this to know about the kind of NAS I have and what all features it support ?
Ask the NAS vendor.
There are a 1000 companies selling NAS equipment. Each company has 1000 products and/or firmware revisions.
We can't keep track of them all.
Ask the NAS vendor for documentation on how their equipment works.
Indeed Alan, I didn't mean to put that way to show you people that you should do any such sort of thing. All I meant was just to know about if at all, there exists any such method(a call or functionality in the deivce itself) that can tell on request if it supports these functions or not. Anyway I understand your point and will search it out with my vendor. Thanks
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Regards, saurabh shandilya www.embedded4fun.com https://in.linkedin.com/in/shandilyasaurabh
participants (3)
-
Alan Buxey -
Alan DeKok -
Saurabh Shandilya