PEAP failures

Batta, Anurag Anurag_Batta at usr.com
Mon Oct 10 17:34:41 CEST 2005


Hi,


Running Cisco AP and FreeRadius, I get PEAP failures. TTLS works. I do
not see a ACCESS REJECT with PEAP. However, there is no ACCESS_ACCEPT
either. It seems to me from the debug that RADIUS expects a packet from
AP but not getting it. Any ideas ? Thanks in advance.

After a few minutes, client disconnects and retries to connect, starting
this cycle again.


---------------LOG follows---------
rlm_mschap: adding MS-CHAPv2 MPPE keys
  modsingle[authenticate]: returned from mschap (rlm_mschap) for request
5  modcall[authenticate]: module "mschap" returns ok for request 5
modcall: group Auth-Type returns ok for request 5
MSCHAP Success

 modsingle[authenticate]: returned from eap (rlm_eap) for request 5
modcall[authenticate]: module "eap" returns handled for request 5
modcall: group authenticate returns handled for request 5
  PEAP: Got tunneled reply RADIUS code 11
        MS-CHAP2-Success =
0x05533d3943384231454435313545413639303638414632393044363831303634394244
4544303831443935
        EAP-Message =
0x010600331a0305002e533d394338423145443531354541363930363841463239304436
38313036343942444544303831443935
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x2541b8665c3f07dd9c5e6e02d700e023
  PEAP: Processing from tunneled session code 0x244888 11
        MS-CHAP2-Success =
0x05533d3943384231454435313545413639303638414632393044363831303634394244
4544303831443935
        EAP-Message =
0x010600331a0305002e533d394338423145443531354541363930363841463239304436
38313036343942444544303831443935
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x2541b8665c3f07dd9c5e6e02d700e023
  PEAP: Got tunneled Access-Challenge

  modsingle[authenticate]: returned from eap (rlm_eap) for request 5
modcall[authenticate]: module "eap" returns handled for request 5
modcall: group authenticate returns handled for request 5
Sending Access-Challenge of id 115 to 192.168.1.7:1150
        EAP-Message =
0x010600801900170301002069b032ec228c41b896215232e86bf4044b6a18adf88f059c
9baf727da5382b1a17030100508b63b8f690789ba6240940129df44921e374f12727725d
1105c9ee8da81ac26f19a16d55612a129c2fbab15882c75042e73ce9101e3a91d1ec31a3
b6b235297a75a99549c8d91ad24b3ded409488aa51
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x2d5808a73134c88586fac62658ba132d
Finished request 5
Going to the next request


This e-mail may contain confidential or privileged information.  If you think you have received this e-mail in error, please advise the sender by reply e-mail and then delete this e-mail immediately.

Thank you.  U. S. Robotics




More information about the Freeradius-Devel mailing list