Some Help Regarding Remote Free Radius Server.
Hello All, First Of All New Year Wishes to all of you. I have configured freeradius server which is working fine for me. Now my wifi environment is like 2 hotels and radius server in different location. My radius server is kept in head office and i want my hotel wifi users to be authenticated by head office radius server. It's only authentication and accounting. Every Hotel have 1 ADSL connection with one static IP. Then I configured Linksys54GL with chillispot and defined my head office radius server IP address(i.e. public IP address of my radius server.). Now in hotel when user connects to linksys router then router forwards request to ADLS router and ADSL router forwards same request to my Head Office Radius server. But Problem is that radius server rejects request it gives error like : "Ignoring request to authentication address * port 1812 from unknown client 59.181.96.194 port 2054" and when i start radius -X at one place it gives error like rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton: Name or service not known It's is the Ip address of my hotel ADSL connection. And ADSL Router dont have any option of defining radius server and secret. Please Help me to sort out this problem. Thanks Pushpraj N.
On Wed, Dec 31, 2008 at 1:26 PM, pushpraj nimbalkar <pushpraj4u@gmail.com>wrote:
Hello All, First Of All New Year Wishes to all of you. I have configured freeradius server which is working fine for me. Now my wifi environment is like 2 hotels and radius server in different location. My radius server is kept in head office and i want my hotel wifi users to be authenticated by head office radius server. It's only authentication and accounting. Every Hotel have 1 ADSL connection with one static IP. Then I configured Linksys54GL with chillispot and defined my head office radius server IP address(i.e. public IP address of my radius server.). Now in hotel when user connects to linksys router then router forwards request to ADLS router and ADSL router forwards same request to my Head Office Radius server. But Problem is that radius server rejects request it gives error like :
"Ignoring request to authentication address * port 1812 from unknown client 59.181.96.194 port 2054"
You have to add this ip(59.181.96.194) in ur client.conf file.
so radius will not ignor request from this ip.hope it will help u
and when i start radius -X at one place it gives error like
rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton: Name or service not known
It's is the Ip address of my hotel ADSL connection. And ADSL Router dont have any option of defining radius server and secret.
Please Help me to sort out this problem.
Thanks
Pushpraj N. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best regards Yawar Hadi Noshahi QAU Islamabad (+92-0300-5504798)
You have to add the two public IPs of radius clients to the clients.conf file, and define a shared secret between them all. On Wed, Dec 31, 2008 at 12:26 AM, pushpraj nimbalkar <pushpraj4u@gmail.com> wrote:
Hello All, First Of All New Year Wishes to all of you. I have configured freeradius server which is working fine for me. Now my wifi environment is like 2 hotels and radius server in different location. My radius server is kept in head office and i want my hotel wifi users to be authenticated by head office radius server. It's only authentication and accounting. Every Hotel have 1 ADSL connection with one static IP. Then I configured Linksys54GL with chillispot and defined my head office radius server IP address(i.e. public IP address of my radius server.). Now in hotel when user connects to linksys router then router forwards request to ADLS router and ADSL router forwards same request to my Head Office Radius server. But Problem is that radius server rejects request it gives error like :
"Ignoring request to authentication address * port 1812 from unknown client 59.181.96.194 port 2054"
and when i start radius -X at one place it gives error like
rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton: Name or service not known
It's is the Ip address of my hotel ADSL connection. And ADSL Router dont have any option of defining radius server and secret.
Please Help me to sort out this problem.
Thanks
Pushpraj N. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Opportunity knocked. My doorman threw him out." - Adrienne Gusoff "At school you don't get parole, good behavior only brings a longer sentence." - The History Boys
You have not read full message. I am using rlm_sql and i already added 59.181.96.194 to my nas list. look at below error rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton: i hope it's clear now. On Wed, Dec 31, 2008 at 2:14 PM, Paul Bartell <paul.bartell@gmail.com> wrote:
You have to add the two public IPs of radius clients to the clients.conf file, and define a shared secret between them all.
On Wed, Dec 31, 2008 at 12:26 AM, pushpraj nimbalkar <pushpraj4u@gmail.com> wrote:
Hello All, First Of All New Year Wishes to all of you. I have configured freeradius server which is working fine for me. Now my wifi environment is like 2 hotels and radius server in different location. My radius server is kept in head office and i want my hotel wifi users to be authenticated by head office radius server. It's only authentication and accounting. Every Hotel have 1 ADSL connection with one static IP. Then I configured Linksys54GL with chillispot and defined my head office radius server IP address(i.e. public IP address of my radius server.). Now in hotel when user connects to linksys router then router forwards request to ADLS router and ADSL router forwards same request to my Head Office Radius server. But Problem is that radius server rejects request it gives error like :
"Ignoring request to authentication address * port 1812 from unknown client 59.181.96.194 port 2054"
and when i start radius -X at one place it gives error like
rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton: Name or service not known
It's is the Ip address of my hotel ADSL connection. And ADSL Router dont have any option of defining radius server and secret.
Please Help me to sort out this problem.
Thanks
Pushpraj N. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Opportunity knocked. My doorman threw him out." - Adrienne Gusoff
"At school you don't get parole, good behavior only brings a longer sentence." - The History Boys - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
pushpraj nimbalkar wrote:
You have not read full message. I am using rlm_sql and i already added 59.181.96.194 to my nas list. look at below error rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton:
i hope it's clear now.
Yes. You need to configure DNS a DNS server on your network. Alan DeKok.
On Wed, Dec 31, 2008 at 2:42 PM, Alan DeKok <aland@deployingradius.com> wrote:
pushpraj nimbalkar wrote:
You have not read full message. I am using rlm_sql and i already added 59.181.96.194 to my nas list. look at below error rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton:
i hope it's clear now.
Yes. You need to configure DNS a DNS server on your network.
Alan DeKok. -
Thank you for reply but still i am not clear. because i have already running DNS server in my network and my freeradius server using same DNS. my resolve.conf has following entries. "nameserver 192.168.1.1" it's my local DNS server. and my radius server local ip address is 192.168.1.12 and public ip address is 203.196.177.199
pushpraj nimbalkar wrote:
On Wed, Dec 31, 2008 at 2:42 PM, Alan DeKok <aland@deployingradius.com> wrote:
pushpraj nimbalkar wrote:
You have not read full message. I am using rlm_sql and i already added 59.181.96.194 to my nas list. look at below error rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret=
Not sure if that is significant here or not, but the IP address also has a space in front of it, both above and in the below.
rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton:
i hope it's clear now.
Yes. You need to configure DNS a DNS server on your network.
Alan DeKok. -
Thank you for reply but still i am not clear. because i have already running DNS server in my network and my freeradius server using same DNS. my resolve.conf has following entries. "nameserver 192.168.1.1"
What you do not seem to have is a reverse mapping of the IP address to a hostname setup. Called a PTR record. Check the manual for your DNS server, and check with the people who own the IP address range who should do this, you or them ...
it's my local DNS server. and my radius server local ip address is 192.168.1.12 and public ip address is 203.196.177.199
*shudder* There is no need for you to give the layout of your network in those details. //anders
On Wed, Dec 31, 2008 at 4:20 PM, Anders Holm <anders.holm@sysadmin.ie> wrote:
pushpraj nimbalkar wrote:
On Wed, Dec 31, 2008 at 2:42 PM, Alan DeKok <aland@deployingradius.com> wrote:
pushpraj nimbalkar wrote:
You have not read full message. I am using rlm_sql and i already added 59.181.96.194 to my nas list. look at below error rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret=
Not sure if that is significant here or not, but the IP address also has a space in front of it, both above and in the below.
rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton:
i hope it's clear now.
Yes. You need to configure DNS a DNS server on your network.
Alan DeKok. -
Thank you for reply but still i am not clear. because i have already running DNS server in my network and my freeradius server using same DNS. my resolve.conf has following entries. "nameserver 192.168.1.1"
What you do not seem to have is a reverse mapping of the IP address to a hostname setup. Called a PTR record. Check the manual for your DNS server, and check with the people who own the IP address range who should do this, you or them ...
it's my local DNS server. and my radius server local ip address is 192.168.1.12 and public ip address is 203.196.177.199
*shudder* There is no need for you to give the layout of your network in those details.
//anders
Ok....my one problem solved.....as you mention there was space before ip address. i corrected the same and now radius again rejecting request error is: rad_recv: Access-Request packet from host x.x.x.x port 2054, id=0, length=195 Received packet from x.x.x.x with invalid Message-Authenticator! (Shared secret is incorrect.) Dropping packet without response. Going to the next request actually i really dont know what to do with shared secret as ADSL router dont have option of defining radius server. so how can i define radius secret.
Ok....my one problem solved.....as you mention there was space before ip address. i corrected the same and now radius again rejecting request error is:
rad_recv: Access-Request packet from host x.x.x.x port 2054, id=0, length=195 Received packet from x.x.x.x with invalid Message-Authenticator! (Shared secret is incorrect.) Dropping packet without response. Going to the next request
actually i really dont know what to do with shared secret as ADSL router dont have option of defining radius server. so how can i define radius secret. -
But your router isn't sending this. Chillispot is. Configure the secret on the portal. Where you configured the radius server. Ivan Kalik Kalik Informatika ISP
On Wed, Dec 31, 2008 at 5:04 PM, <tnt@kalik.net> wrote:
Ok....my one problem solved.....as you mention there was space before ip address. i corrected the same and now radius again rejecting request error is:
rad_recv: Access-Request packet from host x.x.x.x port 2054, id=0, length=195 Received packet from x.x.x.x with invalid Message-Authenticator! (Shared secret is incorrect.) Dropping packet without response. Going to the next request
actually i really dont know what to do with shared secret as ADSL router dont have option of defining radius server. so how can i define radius secret. -
But your router isn't sending this. Chillispot is. Configure the secret on the portal. Where you configured the radius server.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
It's working perfect now. i added secret to my radius server which is mention in chillispot configuration.Now my radius server can authenticate to remote wifi users. Thanks A lot for great support. Wish you happy new year.
participants (6)
-
Alan DeKok -
Anders Holm -
Paul Bartell -
pushpraj nimbalkar -
tnt＠kalik.net -
Yawar Hadi