Hello all! I have freeradius 2.1.3 installed on my FreeBSD 7.1 OS. And i have cisco 7201 with ISG module. When i try to send CoA (Change of authorization) account-logon request like this /bin/echo "User-Name='cisco',User-Password='cisco',cisco-avpair='subscriber:command=account-logon',Cisco-Account-Info='S172.16.xx.xx'" | /usr/local/bin/radclient -x 172.16.yy.yy coa secret i immediatly recieve CoA-NAK. rad_recv: CoA-NAK packet from host 172.16.yy.yy port 1700, id=5, length=56 Cisco-Command-Code = "\0202;cisco" Cisco-Account-Info = "S172.16.xx.xx" There's cisco debug: 012618: *Mar 4 03:03:35.479: RADIUS: COA received from id 234 172.16.xx.xx:51830, CoA Request, len 105 012619: *Mar 4 03:03:35.479: COA: 172.16.xx.xx request queued 012620: *Mar 4 03:03:35.479: RADIUS: authenticator 94 A8 95 26 37 C1 9F F5 - 44 C6 E6 E4 59 21 91 74 012621: *Mar 4 03:03:35.479: RADIUS: User-Name [1] 7 "cisco" 012622: *Mar 4 03:03:35.479: RADIUS: User-Password [2] 18 * 012623: *Mar 4 03:03:35.479: RADIUS: Vendor, Cisco [26] 40 012624: *Mar 4 03:03:35.479: RADIUS: Cisco AVpair [1] 34 "subscriber:command=account-logon" 012625: *Mar 4 03:03:35.479: RADIUS: Vendor, Cisco [26] 20 012626: *Mar 4 03:03:35.479: RADIUS: ssg-account-info [250] 14 "S172.16.xx.xx" 012627: *Mar 4 03:03:35.479: ++++++ CoA Attribute List ++++++ 012628: *Mar 4 03:03:35.479: 068F1110 0 00000009 username(396) 5 cisco 012629: *Mar 4 03:03:35.479: 068F0F08 0 00000009 password(282) 13 <opaque value> 012630: *Mar 4 03:03:35.479: 068F0F18 0 00000009 ssg-account-info(430) 12 S172.16.xx.xx 012631: *Mar 4 03:03:35.479: 068F0F28 0 00000009 ssg-command-code(432) 6 01 63 69 73 63 6F 012632: *Mar 4 03:03:35.479: 012633: *Mar 4 03:03:35.479: RADIUS(00000000): sending 012634: *Mar 4 03:03:35.479: RADIUS(00000000): Send CoA Nack Response to 172.16.xx.xx:51830 id 234, len 56 012635: *Mar 4 03:03:35.479: RADIUS: authenticator 22 E9 05 70 EB CD A1 E7 - 4C 61 07 0B 28 85 5D 97 012636: *Mar 4 03:03:35.479: RADIUS: Vendor, Cisco [26] 16 012637: *Mar 4 03:03:35.479: RADIUS: ssg-command-code [252] 10 012638: *Mar 4 03:03:35.479: RADIUS: 10 32 3B 63 69 73 63 6F [Error-Code 2;cisco] 012639: *Mar 4 03:03:35.479: RADIUS: Vendor, Cisco [26] 20 012640: *Mar 4 03:03:35.479: RADIUS: ssg-account-info [250] 14 "S172.16.xx.xx" Have i sent a correct request to cisco? If no, how can i send a correct account-logon request with radclient? Thank's.
M K wrote:
Hello all!
I have freeradius 2.1.3 installed on my FreeBSD 7.1 OS. And i have cisco 7201 with ISG module. When i try to send CoA (Change of authorization) account-logon request like this
/bin/echo "User-Name='cisco',User-Password='cisco',cisco-avpair='subscriber:command=account-logon',Cisco-Account-Info='S172.16.xx.xx'" | /usr/local/bin/radclient -x 172.16.yy.yy coa secret
http://www.cisco.com/en/US/docs/ios/12_2sb/isg/coa/guide/isgcaapb.html#wp100... The following example is a typical Service Active profile: Service = Framed Cisco: Account-Info = "S12.1.1.2 Cisco: Service-Info = "Ncoa_service" Cisco: Command-Code = "0bservice_coa" where 0b is symbol with 0xb code. i.e. #define IP "192.168.10.50" int c = 0xb; printf("Cisco-Command-Code = '%cP1024x512_SERVICE'\n",c); printf("Cisco-Account-Info = S%s\n", ip); -- With best regards, Evgeniy Kozhuhovskiy Leader, Services team Minsk State Phone Network, RUE Beltelecom.
Thank you for your answers. I've solved my problem, but now i have another one. Does anybody know, can freeradius server recieve CoA requests (using port 3799 or 1700) according to the rfc 3576? And how can i configure it if it does? 2009/3/4 Evgeniy Kozhuhovskiy <ugenk@mgts.by>
M K wrote:
Hello all!
I have freeradius 2.1.3 installed on my FreeBSD 7.1 OS. And i have cisco 7201 with ISG module. When i try to send CoA (Change of authorization) account-logon request like this
/bin/echo "User-Name='cisco',User-Password='cisco',cisco-avpair='subscriber:command=account-logon',Cisco-Account-Info='S172.16.xx.xx'" | /usr/local/bin/radclient -x 172.16.yy.yy coa secret
http://www.cisco.com/en/US/docs/ios/12_2sb/isg/coa/guide/isgcaapb.html#wp100... The following example is a typical Service Active profile: Service = Framed Cisco: Account-Info = "S12.1.1.2 Cisco: Service-Info = "Ncoa_service" Cisco: Command-Code = "0bservice_coa" where 0b is symbol with 0xb code. i.e. #define IP "192.168.10.50" int c = 0xb; printf("Cisco-Command-Code = '%cP1024x512_SERVICE'\n",c); printf("Cisco-Account-Info = S%s\n", ip);
-- With best regards, Evgeniy Kozhuhovskiy Leader, Services team Minsk State Phone Network, RUE Beltelecom. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
M K wrote:
Thank you for your answers. I've solved my problem, but now i have another one. Does anybody know, can freeradius server recieve CoA requests (using port 3799 or 1700) according to the rfc 3576? And how can i configure it if it does?
It does not receive CoA requests. If it did, this would be documented in radiusd.conf. Maybe in a few months. Alan DeKok.
participants (4)
-
Alan DeKok -
Evgeniy Kozhuhovskiy -
M K -
tnt＠kalik.net