Help - ASN-GW throwing error - Validation of attributes failed

[Rathod Subhashchandra]

Dear Iliya,

Thanks for your valuable suggestion.
Rlm_wimax module was not building. I enabled and now it is building.
As per your suggestion, I have added "wimax" in file
raddb/sites-enabled/default
Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me
in this?

Thanks !
Rathod.


-----Original Message-----
From: Iliya Peregoudov [mailto:iperegudov at cboss.ru] 
Sent: Thursday, March 15, 2012 11:41 AM
To: rathod at tataelxsi.co.in; FreeRadius users mailing list
Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed

There is no WiMAX-MSK attribute in Access-Accept. You need to call 
rlm_wimax module from post-auth section of default virtual server:

# raddb/sites-enabled/default
post-auth {
    ...
    wimax
    ...
}

This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and 
MS-MPPE-Recv-Key.


Rathod Subhashchandra wrote:
> Dear All,
> 
>  
> 
> I am trying to setup EAP-TLS authentication mechanism for my WiMAX 
> testing and following are the details.
> 
>  
> 
> 1.  TATA ELXSI - WIMAX MS
> 
> 2.  TATA ELXSI - WIMAX BS
> 
> 3.  ARICENT ASN-GW version 4.2
> 
> 4.  Free Radius AAA server version 2.1.3
> 
>  
> 
> Certificates exchange is through. When AAA server responds with 
> Access-Accept, ASN-GW throws error saying "Validation of the Attributes 
> in the Received packet failed"
> 
>  
> 
> Wireshark logs @ ASN-GW
> 
>  
> 
>  
> 
> I could not attach wireshark pcap logs due to size constraint. I have 
> took print screen of only ACCESS-ACCEPT message copied to MS word.
> 
>  
> 
> What are the mandatory fields in Access-Accept and their valid values?
> 
> Service-Type attribute value is 2. ASN-GW is adding this attribute. Is 
> this valid for EAP-TLS?
> 
> I am guessing this should be 8. I don't have control over ASN-GW 
> parameters modification.
> 
>  
> 
> Please let me know what fields are invalid in above ACCESS-ACCEPT.
> 
>  
> 
> Thanks !
> 
> Rathod.
> 
>  
> 
> 
> ------------------------------------------------------------------------
> 
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html