radclient: received response to request we did not send.
Hi, I'm trying to use radclient in order to disconnect users, with the following PHP script: <? $framed_ip = 'xxx.xxx.xxx.xxx'; $cisco_ip='aaa.aaa.aaa.aaa'; popen("/bin/echo 'Framed-IP-Address=$framed_ip' | /home/radius/bin/radclient -d /home/radius/etc/raddb/ -x $cisco_ip disconnect secret", 'w'); ?> But I receive the error: Sending Disconnect-Request of id 3 to aaa.aaa.aaa.aaa:1700 Framed-IP-Address = xxx.xxx.xxx.xxx rad_recv: Disconnect-NAK packet from host aaa.aaa.aaa.aaa:1645, id=3, length=20 radclient: received response to request we did not send. This is the tcpdump (where bbb.bbb.bbb.bbb is the IP address of the server where I'm running the script from): 21:07:59.171286 IP bbb.bbb.bbb.bbb.40122 > aaa.aaa.aaa.aaa.1700: UDP, length 26 21:07:59.315031 IP aaa.aaa.aaa.aaa.datametrics > bbb.bbb.bbb.bbb.40122: RADIUS, Unknown Command (42), id: 0x03 length: 20 On my Cisco AS5300 I've added: aaa pod server auth-type any server-key secret What can be the problem?? Thanks in advance, Juan
Juan Nin <juanin@gmail.com> wrote:
Sending Disconnect-Request of id 3 to aaa.aaa.aaa.aaa:1700 Framed-IP-Address = xxx.xxx.xxx.xxx rad_recv: Disconnect-NAK packet from host aaa.aaa.aaa.aaa:1645, id=3, length=20 radclient: received response to request we did not send.
You sent a request TO port 1700, and got a response FROM port 1645. This is wrong. RADIUS responses must come FROM the port TO which the request was sent. Alan DeKok.
participants (2)
-
Alan DeKok -
Juan Nin