freeradius proxy can't recognize Delegated-IPv6-Prefix attribute
ichiro tanaka
i_tanaka at hotmail.co.jp
Fri Oct 22 04:48:10 CEST 2010
Thanks Alan.
>ichiro tanaka wrote:
>> My freeradius proxy already includes "dictionary.rfc4818".
>> Do I need something?
>
> No idea. Maybe the attribute isn't in the correct format.
I see.
Auth-server is freeradius-2.1.10.
I captuared radius packet by wireshark, and compared to rfc4818(sec.3) format.
"Delegated-IPv6-Prefix" attribute that auth-server replied and reply_log looks
correct.
http://tools.ietf.org/html/rfc4818
Proxy-Server recognition was repaired, if proxy-server did not include
"dictionary.ascend".
--- auth-server [[ users ]] ---
user at example.jp Cleartext-Password := password
Delegated-IPv6-Prefix := 1234:5678:90ab:cdef::/64
--- auth-server [[ radiusd -X ]] ---
Sending Access-Accept of id 250 to 10.233.36.101 port 11814
Delegated-IPv6-Prefix := 1234:5678:90ab:cdef::/64
Proxy-State = 0x34
Thu Oct 21 19:00:08 2010 : Info: Finished request 0.
--- auth-server [[ reply_log ]] ---
Wed Oct 20 16:56:18 2010
Packet-Type = Access-Accept
Delegated-IPv6-Prefix := 1234:5678:90ab:cdef::/64
--- proxy-server [[ radiusd -X ]] ---
rad_recv: Access-Accept packet from host 10.233.36.100 port 1812, id=76, length=
44
Attr-123 = 0x00401234567890abcdef0000000000000000
Proxy-State = 0x3135
--- proxy-server [[ post_proxy_log ]] ---
Fri Oct 22 11:07:20 2010
Packet-Type = Access-Accept
Attr-123 = 0x00401234567890abcdef0000000000000000
Proxy-State = 0x37
--- proxy-server [[ not inlucde "dictionary.ascend" radiusd -X ]] ---
rad_recv: Access-Accept packet from host 10.233.36.100 port 1812, id=118, length
=44
Delegated-IPv6-Prefix = 1234:5678:90ab:cdef::/64
Proxy-State = 0x3134
--- proxy-server [[ not inlucde "dictionary.ascend" post_proxy_log ]] ---
Fri Oct 22 11:26:41 2010
Packet-Type = Access-Accept
Delegated-IPv6-Prefix = 1234:5678:90ab:cdef::/64
Proxy-State = 0x3133
ichiro tanaka
More information about the Freeradius-Users
mailing list