Help - ASN-GW throwing error - Validation of attributes failed

[Rathod Subhashchandra]

Dear Fajar,

I went through the documentation of ASN-GW. I could not find configuring AAA
parameters except AAA IP address.

I am not quite clear which attribute is causing the problem.
For EAP-TTLS, almost same ACCESS-ACCEPT attributes are through. But for
EAP-TLS I am facing this issue.

I am attaching the AAA wireshark logs. Please let me know your valuable
feedback.

Thanks !
Rathod.




-----Original Message-----
From: Fajar A. Nugraha [mailto:list at fajar.net] 
Sent: Thursday, March 15, 2012 11:00 AM
To: rathod at tataelxsi.co.in; FreeRadius users mailing list
Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed

On Thu, Mar 15, 2012 at 12:21 PM, Rathod Subhashchandra
<rathod at tataelxsi.co.in> wrote:
> Wireshark logs @ ASN-GW
>
>
>
>
>
> I could not attach wireshark pcap logs due to size constraint. I have took
print screen of only ACCESS-ACCEPT message copied to MS word.

While that information might be interesting for ASN
support/list/forum, this list is not it.

> What are the mandatory fields in Access-Accept and their valid values?
>
> Service-Type attribute value is 2. ASN-GW is adding this attribute. Is
this valid for EAP-TLS?
>
> I am guessing this should be 8. I don't have control over ASN-GW
parameters modification.
>
>
>
> Please let me know what fields are invalid in above ACCESS-ACCEPT.

Did you try asking the NAS vendor?

If you know what attributes are needed, you can configure FR to send
it. If you don't know what they are, then you should ask the NAS
vendor, or at least read its documentation.

-- 
Fajar
-------------- next part --------------
A non-text attachment was scrubbed...
Name: AAA_Wireshark_logs_15_Mar_2012-1.zip
Type: application/x-zip-compressed
Size: 3532 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120315/ebe3ffaf/attachment.bin>