New subject: FreeRadius and Dlink Switch Authentication Problem

29 Dec 2005

      Merhabalar Inci hanim,
oncelikle yardimlariniz icin cok tesekkur ederim. Ancak tacacs kullanamiyoruz cunku switchlerin cogu Dlink ve 3226 modeli yani tacacs yok. radius server destekliyorlar. bu nedenle radius kullanmam gerek.

#radiusd -X
diyerek debug moda aliyorum ve benim ip adresim 10.0.0.185 radius server ise 10.0.0.6'da calisiyor. switch ise (dlink marka) 10.0.0.250 ip adresine sahip. ben 

#telnet 10.0.0.250

komutunu verdigim zaman switchin kendi icindeki kullanici ile (admin) girebiliyorum. ama hicbir log dusmuyor. ne onerirsiniz?

----- Original Message -----
From: "Inci Gedik " <igedik@ford.com.tr>
To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org>
Subject: RE: FreeRadius and Dlink Switch Authentication Problem
Date: Thu, 29 Dec 2005 15:20:43 +0200
...
Selam,
Radius un debug ettin mi ? Sen switch e baglanmaya calisirken ekrana neler
geliyor bir bakar misin ? Birde calisan bir sistemden ornek veriim :
client.conf dosyani asagidaki gibi editler misin ?
client 10.0.0.250 {
         secret      = 250
         shortname   = switch
    nastype	  = cisco
}
Users dosyasindaki kulanici tanimlamasini asagidaki gibi yapip, linux
sisteminde steve diye bir kullanici acip bir de sifre verirsen baglantiyi
saglayabilirsin.
steve           Auth-Type := System
                 Service-Type = Shell-User,
                 Login-Service = Telnet,
                 Login-IP-Host = 0.0.0.0,
                 Login-TCP-Port = Telnet
Linux altinda port numaralarinda acik degil mi ? Bu sekilde bir kontrol
edersen bir de conf dosyani inceleyebiliriz. O zaman conf dosyanda bir hata
var demektir.
Bi de israrla tacacs+ diyorum : )
Kolay gelsin ,
Inci Gedik
-----Original Message-----
From: freeradius-users-bounces+igedik=ford.com.tr@lists.freeradius.org
[mailto:freeradius-users-bounces+igedik=ford.com.tr@lists.freeradius.org] On
Behalf Of Kai Geek
Sent: 29 Aralık 2005 Perşembe 14:24
To: freeradius-users@lists.freeradius.org
Subject: FreeRadius and Dlink Switch Authentication Problem
Hello,
i am using freeradius in my computer with the ip 10.0.0.6
i have a dlink 3226s model switch in my network and its ip is 10.0.0.250
i want this switch to verify username and password from radius server
(10.0.0.6)
i have added 10.0.0.250 as a client to the radius servers clients.conf and
users files and i introduced a user. but still it doesnt connect. where may
be the error?
when i test locally, it seems as working but teh switch doesnt connect to
radius?
thank you,
using command radius server (10.0.0.6)
kernel@debian#pico clients.conf
client 10.0.0.250 {
         secret          = 250
         shortname       = 1
}
kernel@debian#pico users
steve   Auth-Type := Local, User-Password == "testing"
         Service-Type = Framed-User,
         Framed-Protocol = PPP,
         Framed-IP-Address = 127.0.0.1,
         Framed-IP-Netmask = 255.255.255.0,
         Framed-Routing = Broadcast-Listen,
         Framed-Filter-Id = "std.ppp",
         Framed-MTU = 1500,
         Framed-Compression = Van-Jacobsen-TCP-IP
#radtest steve testing 10.0.0.6 1812 testing
okay
what problem ?
when i test locally, it seems as working but teh switch doesnt connect to
radius?
+-+-+-+ BEGIN PGP SIGNATURE +-+-+-+
Version: GnuPG v1.4.2 (GNU/Linux)
    .-.      .-.    _
    : :      : :   :_;
  .-' : .--. : `-. .-. .--.  ,-.,-.
' .; :' '_.'' .; :: :' .; ; : ,. :
`.__.'`.__.'`.__.':_;`.__,_;:_;:_;
Kai "Ozgur" Geek
Network Engineer
PGP ID: B1B63B6E
+-+-+-+ END PGP SIGNATURE +-+-+-+
--
_______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
+-+-+-+ BEGIN PGP SIGNATURE +-+-+-+
Version: GnuPG v1.4.2 (GNU/Linux)
   .-.      .-.    _              
   : :      : :   :_;             
 .-' : .--. : `-. .-. .--.  ,-.,-.
' .; :' '_.'' .; :: :' .; ; : ,. :
`.__.'`.__.'`.__.':_;`.__,_;:_;:_;

Kai "Ozgur" Geek
Network Engineer
PGP ID: B1B63B6E
+-+-+-+ END PGP SIGNATURE +-+-+-+

-- 
_______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.

Powered by Outblaze

RE: FreeRadius and Dlink Switch Authentication Problem

Kai Geek

Inci Gedik

tags

participants (2)