Freeradius 3 and routers problem

alter1 alter1 at onet.pl
Mon Jan 19 12:29:14 CET 2015


Hello,
 
I have a network: 3 soho wifi routers Dlink wrt54gl, wrt320n and Asus RT-AC52U. On each is the same configuration (wifi wpa2-enterprise with radius auth on 192.168.10.x server with 1812 port and secret key for each client)
 
Server is Centos 7 based with latest version with ip 192.168.10.x
# repoquery freeradius
freeradius-0:3.0.1-6.el7.x86_64
# tail -19 /etc/raddb/clients.conf
client rt-a1-2 {
        ipaddr = 192.168.10.4
        secret = test1
        shortname = rt-a1-2
}
client rt-a1-1 {
        ipaddr = 192.168.10.2
        secret = test2
        shortname = rt-a1-1
}
client rt-a2-1 {
        ipaddr = 192.168.10.3
        secret = test3
        shortname = rt-a2-1
}
In /etc/raddb/users par example:
"test" Cleartext-Password := "test"
and others in the same format...
 
This server is relay to other dhcp server therefore I have:
# cat /etc/raddb/sites-available/dhcp.relay
server dhcp.ens160 {
        listen {
                ipaddr = *
                port = 67
                type = dhcp
                interface = ens160
        }
        dhcp DHCP-Discover {
                update config {
                        DHCP-Relay-To-IP-Address := 192.168.10.1
                }
                update request {
                        DHCP-Gateway-IP-Address := 192.168.10.254
                }
                ok
        }
        dhcp DHCP-Request {
                update config {
                        DHCP-Relay-To-IP-Address := 192.168.10.1
                }
                update request {
                        DHCP-Gateway-IP-Address := 192.168.10.254
                }
                ok
        }
}
On 192.168.10.1 dhcpserver works ok
 
In logs
/var/log/radius/radius.log
Mon Jan 19 12:07:14 2015 : Auth: (44) Login OK: [test/<via Auth-Type = MSCHAP>] (from client rt-a1-1 port 0 via TLS tunnel)
Mon Jan 19 12:07:14 2015 : Auth: (45) Login OK: [test/<via Auth-Type = EAP>] (from client rt-a1-1 port 13 cli 8c3ae3XXXXXX)
Mon Jan 19 12:13:23 2015 : Auth: (59) Login OK: [test/<via Auth-Type = MSCHAP>] (from client rt-a1-1 port 0 via TLS tunnel)
Mon Jan 19 12:13:23 2015 : Auth: (60) Login OK: [test/<via Auth-Type = EAP>] (from client rt-a1-1 port 13 cli 8c3ae3XXXXXX)
Mon Jan 19 12:15:18 2015 : Auth: (70) Login OK: [test/<via Auth-Type = MSCHAP>] (from client rt-a1-2 port 0 via TLS tunnel)
Mon Jan 19 12:15:18 2015 : Auth: (71) Login OK: [test/<via Auth-Type = EAP>] (from client rt-a1-2 port 0 cli 8C-3A-E3-XX-XX-XX)
Mon Jan 19 12:16:10 2015 : Auth: (80) Login OK: [test/<via Auth-Type = MSCHAP>] (from client rt-a1-1 port 0 via TLS tunnel)
Mon Jan 19 12:17:13 2015 : Auth: (85) Login OK: [test/<via Auth-Type = EAP>] (from client rt-a1-1 port 13 cli 8c3ae3XXXXXX)
And all works... But... Ater some period of time 30-60 minutes noone can connect to wifi on AP's.
I tried with alternative firmwares. Still the same.
After tcpdump connections I have nothing... That mean. I tcpdump iface (ens160) and cannot see ANY PACKETS from any AP's to radius server...
 
Problem disappear after restart freeradius (systemctl restart radiusd.service). And after some period of time... the same is happen.
What the point? Where can be a problem?
I tried to disable renew key on AP in radius configuration but this not helps.
Thanx for help :-)
 
With regards
MK
 
 
 


More information about the Freeradius-Users mailing list