Access-Accept BUT no connection

[Arran Cudbard-Bell]

On 28 Jan 2014, at 10:56, Clement Ogedengbe <c.ogedengbe at worc.ac.uk> wrote:

> The reply-log of the Main server and the backup server to the NAS is similar as below: (You could see that the same NAS (10.255.253.2) is involved in both connections.
> 
> Reply from the backup server to the NAS -> with this user gets online
> =================================================================
> 10.255.253.2 Returned from 193.62.48.60 for User xxxx - Tue Jan 28 09:19:35 2014
>        Packet-Type = Access-Accept
>        MS-CHAP2-Success = 0x00533d44363743314134363437423344393546414538463137443441333743334335454134373036414433
>        MS-MPPE-Recv-Key = 0xd233362f60149491fff8e1009d0f7940
>        MS-MPPE-Send-Key = 0x2cb6ef890950e98f530dabec5dfffe91
>        MS-MPPE-Encryption-Policy = 0x00000002
>        MS-MPPE-Encryption-Types = 0x00000004
> 
> Reply from the Main server to the NAS -> with this user UNABLE to get online
> =================================================================
> 10.255.253.2 Returned from 193.62.48.61 for User xxxx - Tue Jan 28 09:51:57 2014
>        Packet-Type = Access-Accept
>        MS-CHAP2-Success = 0x00533d44303538334343433436373339323643313033343843413135463643373637333639373241423130
>        MS-MPPE-Recv-Key = 0xc4c255e279235d1abc4128569b4391b6
>        MS-MPPE-Send-Key = 0x3773e3518d6620d5d8f85e158848c601
>        MS-MPPE-Encryption-Policy = 0x00000002
>        MS-MPPE-Encryption-Types = 0x00000004

Hm, those look OK. I don't read MSHCAPv2 though, maybe someone who does can comment on whether they're actually OK.

It's probably a network issue then, look at counters on the NAS. Verify timeout/malformed packet counters associated with the RADIUS hosts aren't incrementing.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140128/ee863dff/attachment.pgp>