Freeradius server can not see any request from clients.

Hernan Antolini antolini at ar.ibm.com
Thu Oct 26 15:23:19 CEST 2006


Richard, to be sure about the packet arriving at the radius machine and 
see the content of the packet you can use "netcat".
@radius-server : nc -l -u -p 1812 -vv -o /tmp/dump_hex_packet (will use 
UDP and dump hex info)
@client_machine : radtest as usual

hope it helps

freeradius-users-bounces+antolini=ar.ibm.com at lists.freeradius.org wrote on 
10/26/2006 09:29:27 AM:

> Hi, 
> 
> Actually, the 0 in the radtest command means NAS-Port. Since 1812 is
> the default port for radius defined in /etc/service, the Access-
> Request is always sent to port 1812.
> I can see the same messege as follow when I type both 0 or 1812:
>             Sending Access-Request of id 40 to IP of server port 1812
>                           User-Name = "username"
>                           User-Password = "password"
>                           NAS-IP-Address = 255.255.255.255
>                           NAS-Port = 0/1812 (According to the number
> typed in radtest command)
> 
> Now, I am not sure wether the RADIUS server receives the Access-
> Request from the client or not. As I said, I can see the packet 
> arrives at the interface and port of the server, but no information 
> printed out in RADIUS debug mode. 
> And the local test just works fine.
> 
> Thanks!
> 
> BR
> Richard
> 
> 
> 
> 
> On 10/26/06, Vasea Marii <vascim at yahoo.com> wrote: 
> I guess you didn't type " radtest username password localhost 0 
> sharedsecret" but " radtest username password localhost 1812 
> sharedsecret" why send it to the port 0? 
> 
> 
> richard Bai <baixin at gmail.com> wrote: 
> 

> Hi, everyone,
> 
> I face a very strange problem right now when I configure a 
> freeradius server with PEAP + LDAP.
> 
> I can start the radius in debug mode properly. I get following lines:
> Listening on authentication *:1812
> Listening on accounting *:1813
> Ready to process requests.
> 
> Then I did test by using " radtest username password localhost 0 
sharedsecret"
> And the radius server replied with Access-Accept message. So, I 
> think the serve works just fine.
> 
> But when I tested by using "radtest username password IP of server 0
> sharedsecret" from a client conneted to the server through a hub, I 
> can not get anything back.
> I even did not see any Access-Request information in debug mode on 
> the radius server. It looks like the radius doesn't receive anything.
> However, I sniffered the interface via Ethereal and used " tcpdump -
> v port 1812 " in the server, I do see the Access-Request packet 
> received by the interface on the server, 
> I confirmed that the 1812 port is open. 
> 
> Please give me some idea. Any advices or solution is welcome.
> 
> Thank you very much!
> 
> 
> 
> Best Regards
> Richard
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.
> org/list/users.html 
> 
> Get your own web address for just $1.99/1st yr. We'll help. Yahoo! 
> Small Business . 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.
> org/list/users.html 

> - 
> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20061026/c916d0ed/attachment.html>


More information about the Freeradius-Users mailing list