Help - ASN-GW throwing error - Validation of attributes failed

[Iliya Peregoudov]

There is no WiMAX-MSK attribute in Access-Accept. You need to call 
rlm_wimax module from post-auth section of default virtual server:

# raddb/sites-enabled/default
post-auth {
    ...
    wimax
    ...
}

This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and 
MS-MPPE-Recv-Key.


Rathod Subhashchandra wrote:
> Dear All,
> 
>  
> 
> I am trying to setup EAP-TLS authentication mechanism for my WiMAX 
> testing and following are the details.
> 
>  
> 
> 1.  TATA ELXSI - WIMAX MS
> 
> 2.  TATA ELXSI - WIMAX BS
> 
> 3.  ARICENT ASN-GW version 4.2
> 
> 4.  Free Radius AAA server version 2.1.3
> 
>  
> 
> Certificates exchange is through. When AAA server responds with 
> Access-Accept, ASN-GW throws error saying "Validation of the Attributes 
> in the Received packet failed"
> 
>  
> 
> Wireshark logs @ ASN-GW
> 
>  
> 
>  
> 
> I could not attach wireshark pcap logs due to size constraint. I have 
> took print screen of only ACCESS-ACCEPT message copied to MS word.
> 
>  
> 
> What are the mandatory fields in Access-Accept and their valid values?
> 
> Service-Type attribute value is 2. ASN-GW is adding this attribute. Is 
> this valid for EAP-TLS?
> 
> I am guessing this should be 8. I don’t have control over ASN-GW 
> parameters modification.
> 
>  
> 
> Please let me know what fields are invalid in above ACCESS-ACCEPT.
> 
>  
> 
> Thanks !
> 
> Rathod.
> 
>  
> 
> 
> ------------------------------------------------------------------------
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6269 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120315/14b862f5/attachment-0001.bin>