Hi All, I have freeradius 1.1.7 running on RHEL 5. radtest works with a local user setup, and also with authentication via Active Directory. However, anything outside the radius server host does not get a reply. I have configured a Multitech MA820 and also tried ntradping, and both get the same results - "Could not receive a response from server" is the message when I use ntradping, and "Server did not respond in a timely manner" is the response when I try to connect from the Multitech. Is there some setting I need to check to make sure external access is enabled? Thanks in advance ~ Cindy Yoho Systems Engineer United Methodist Publishing House Nashville, TN
Hi,
Hi All,
I have freeradius 1.1.7 running on RHEL 5. radtest works with a local user setup, and also with authentication via Active Directory. However, anything outside the radius server host does not get a reply. I have configured a Multitech MA820 and also tried ntradping, and both get the same results - "Could not receive a response from server" is the message when I use ntradping, and "Server did not respond in a timely manner" is the response when I try to connect from the Multitech.
Is there some setting I need to check to make sure external access is enabled?
iptables? your host is firewalled and therefore FR doesnt see the packet at all? tcpdump -eqntl -i eth0 port 1812 (if eth0 is your NIC) then do some stuff. do you see anything? iptables -L -n are there entries? if so, ensure there are 1812/1813/1814 UDP entries too! alan
On Tue, 2008-08-05 at 18:17 +0100, A.L.M.Buxey@lboro.ac.uk wrote:
your host is firewalled and therefore FR doesnt see the packet at all?
Also, if the server host is multihomed, then the response packet may be coming from a different source IP than the original request was sent to, in which case the client may ignore it. The fix for this is to have the radius server listen on a single IP, which will cause that IP to be used as the source and avoid this problem. tcpdump is your friend here too. --Greg
take a look at client file. there you can specify which clients ( IP addresses ) are allowed . add the public ip of your outside clients/nas. 2008/8/5 Yoho, Cindy <Cyoho@umpublishing.org>:
Hi All,
I have freeradius 1.1.7 running on RHEL 5. radtest works with a local user setup, and also with authentication via Active Directory. However, anything outside the radius server host does not get a reply. I have configured a Multitech MA820 and also tried ntradping, and both get the same results - "Could not receive a response from server" is the message when I use ntradping, and "Server did not respond in a timely manner" is the response when I try to connect from the Multitech.
Is there some setting I need to check to make sure external access is enabled?
Thanks in advance ~
Cindy Yoho Systems Engineer United Methodist Publishing House Nashville, TN
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
A.L.M.Buxey@lboro.ac.uk -
Greg Woods -
orion -
Yoho, Cindy