RE: Freeradius & Juniper
I'm using freeradius 0.9.3 (mandrake 10) to authenticate pppoe users ! > > > > When a juniper equipment try to authenticate it fails! (most other brand > > succed) They told me the field order are not send in the good order...> > First of all, I have no idea what you are doing from your explanation... > you are authenticating the PPPoE users, so I would think that you are > the ISP yourself.>
As a mather of fact I'm working for an ISP !
- What is the role of the Juniper device? (The device that is requesting > the connection? The device that is receiving the connection?)> - Exactly what kind of equipment is on the other end of the line?> - Which device is communicating with FreeRADIUS?
Our equipment ISP is a Xedia router (Lucent AP) The authentication is done via Freeradius 0.9.3 running on mdk 10 The juniper equipment is on one of our client side, and it's the only equipment that won't authenticate at all In the radius users file we have the following: username@domain.com Auth-Type := Local, User-Password == "edc852" Service-Type = Login, Framed-Protocol = PPP, Framed-Address = 200.100.50.25, Xedia-DNS-Server = 175.200.225.250, XEDIA-PPP-ECHO-INTERVAL = 30 To answer the other question : No I didn't try with the latest version I'm having problems installing it (1.1.6) on this distribution (mdk 10) Thanks for your reply> > > : SEND DECODE:(ethernet0/0) ***[IPCP ConfReq ID=0x1> > <ADDR 0.0.0.0> <DNS_P 0.0.0.0> <DNS_S 0.0.0.0> <NBNS_P 0.0.0.0> <NBNS_S > > 0.0.0.0>]***> > > > RECV DECODE:(ethernet0/0)> > ***[IPCP ConfRej ID=0x1 <NBNS_P 0.0.0.0> <DNS_S 0.0.0.0> <NBNS_S > > 0.0.0.0>]***> > > > Can I do something about this rapidely> > This does not look like a RADIUS problem. One of your PPP peers (the one > on the other end of the line) is mangling its responses and the device > from which you posted the logs is not accepting that (as it should, like > you already indicated yourself). This is a PPPoE problem.> > Gtnx> Marcel> - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _________________________________________________________________ Soyez parmi les premiers à essayer Windows Live Mail. http://ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-491...
IPCP (thing that's failing) is a part of PPP negotiation. It has absolutely nothing to do with radius authentication. Your radius server is not at fault here. Installing new one will not help. Don't bother looking at radius. Look into PPP negotiation between routers. Ivan Kalik Kalik Informatika ISP Dana 27/7/2007, "J-P Raymond" <vectorw16@hotmail.com> piše:
I'm using freeradius 0.9.3 (mandrake 10) to authenticate pppoe users ! > > > > When a juniper equipment try to authenticate it fails! (most other brand > > succed) They told me the field order are not send in the good order...> > First of all, I have no idea what you are doing from your explanation... > you are authenticating the PPPoE users, so I would think that you are > the ISP yourself.>
As a mather of fact I'm working for an ISP !
- What is the role of the Juniper device? (The device that is requesting > the connection? The device that is receiving the connection?)> - Exactly what kind of equipment is on the other end of the line?> - Which device is communicating with FreeRADIUS?
Our equipment ISP is a Xedia router (Lucent AP)
The authentication is done via Freeradius 0.9.3 running on mdk 10
The juniper equipment is on one of our client side, and it's the only equipment that won't authenticate at all
In the radius users file we have the following:
username@domain.com Auth-Type := Local, User-Password == "edc852" Service-Type = Login, Framed-Protocol = PPP, Framed-Address = 200.100.50.25, Xedia-DNS-Server = 175.200.225.250, XEDIA-PPP-ECHO-INTERVAL = 30
To answer the other question : No I didn't try with the latest version I'm having problems installing it (1.1.6) on this distribution (mdk 10)
Thanks for your reply> > > : SEND DECODE:(ethernet0/0) ***[IPCP ConfReq ID=0x1> > <ADDR 0.0.0.0> <DNS_P 0.0.0.0> <DNS_S 0.0.0.0> <NBNS_P 0.0.0.0> <NBNS_S > > 0.0.0.0>]***> > > > RECV DECODE:(ethernet0/0)> > ***[IPCP ConfRej ID=0x1 <NBNS_P 0.0.0.0> <DNS_S 0.0.0.0> <NBNS_S > > 0.0.0.0>]***> > > > Can I do something about this rapidely> > This does not look like a RADIUS problem One of your PPP peers (the one > on the other end of the line) is mangling its responses and the device > from which you posted the logs is not accepting that (as it should, like > you already indicated yourself). This is a PPPoE problem.> > Gtnx> Marcel> - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _________________________________________________________________ Soyez parmi les premiers ŕ essayer Windows Live Mail. http://ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-491...
participants (2)
-
J-P Raymond -
tnt＠kalik.co.yu