802.1X Invalid packet code 4 sent to authentication
Hello, I have a problem between a microswitch microsens ( generation 6 ethernet switches) which is configured in the mode 802.1X and my serveur freeradius debian (2.1.12+dfsg-1.2). I use EAP/TLS witch mac address. I have this message : Thu Jan 29 11:26:30 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 45804 : IGNORED Thu Jan 29 11:26:30 2015 : Info: Ready to process requests. Thu Jan 29 11:28:15 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 45804 : IGNORED Thu Jan 29 11:28:15 2015 : Info: Ready to process requests. Thu Jan 29 11:28:16 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 52149 : IGNORED Thu Jan 29 11:28:16 2015 : Info: Ready to process requests. Thu Jan 29 11:28:19 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 52149 : IGNORED Thu Jan 29 11:28:19 2015 : Info: Ready to process requests. I suppose it is the paquet format between the microswitch microsens and freeradius. Any ideas? My test are okay between my freeradius and my switch cisco 2960G. Thank's you. Regards. Julien.
Am Donnerstag, 29. Januar 2015, 14:04:51 schrieb Julien Bamberger:
Hello,
I have a problem between a microswitch microsens ( generation 6 ethernet switches) which is configured in the mode 802.1X and my serveur freeradius debian (2.1.12+dfsg-1.2). I use EAP/TLS witch mac address.
I have this message :
Thu Jan 29 11:26:30 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 45804 : IGNORED Thu Jan 29 11:26:30 2015 : Info: Ready to process requests. Thu Jan 29 11:28:15 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 45804 : IGNORED Thu Jan 29 11:28:15 2015 : Info: Ready to process requests. Thu Jan 29 11:28:16 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 52149 : IGNORED Thu Jan 29 11:28:16 2015 : Info: Ready to process requests. Thu Jan 29 11:28:19 2015 : Debug: Invalid packet code 4 sent to authentication port from client 192.168.83.105 port 52149 : IGNORED Thu Jan 29 11:28:19 2015 : Info: Ready to process requests.
Code 4 is a Accounting-Request packet. If that is sent to your authentication server (see: "authentication port" in your logs) this is an error. Please check your switches if you can configure it to send the RADIUS accouting to port 1813 of your radius server. Mit freundlichen Grüßen, Michael Schwartzkopff -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
On 29 Jan 2015, at 13:04, Julien Bamberger <julien.bamberger@g2elab.grenoble-inp.fr> wrote:
Thu Jan 29 11:26:30 2015 : Debug: Invalid packet code 4 sent to authentication port
Packet type 4 is an accounting packet, you probably made an error configuring your switch. AuthN goes to 1812 by default, Accounting to 1813 - looks like your switch is sending accounting to 1812. Regards, Adam Bishop gpg: 0x6609D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 882 5529 90. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 614 9442 38. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
On 29 Jan 2015, at 13:12, Adam Bishop <Adam.Bishop@jisc.ac.uk> wrote:
Packet type 4 is an accounting packet, you probably made an error configuring your switch.
AuthN goes to 1812 by default, Accounting to 1813 - looks like your switch is sending accounting to 1812.
And if your switch cannot be configured with port 1813 for accounting packets, try setting your server type (in FreeRADIUS) to auth+acct. Or get a new switch. Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
participantes (4)
-
Adam Bishop -
Julien Bamberger -
Michael Schwartzkopff -
Stefan Paetow