Need help: Freeradius says "sent access-accept" but actually is not sending it?

[Fajar A. Nugraha]

On Thu, Nov 14, 2019 at 3:19 PM Vyzdura Tomas <Tomas.Vyzdura at vviss.cz> wrote:
>
> I can get the request, and in freeradius debuglog I see it is processed and it even shows  Sent Access-Accept but it looks like the server doesn’t send the actual packet – when monitoring with tcpdump I can see only ARP packets sent to the IP address from where the request came.
>

Looks like network issue.

>
> When testing from another machine with same user/password on our network it works – I get authenticated and receive IP address in the response. I also see radius sending packet in tcpdump.
> There is no firewall on the server
>

>
> (0) Sent Access-Accept Id 60 from 10.10.10.75:1812 to 10.10.10.241:37488 length 0
> (0)   Framed-IP-Address = 10.10.104.1
> (0)   Service-Type = Framed-User
> (0) Finished request



Try these things:
- are you running tcpdump on the correct interface?
- can you ping 10.10.10.241? or connect to some open ports there (e.g
it might have ssh open)
- try running 'ip r'. Does it show a specific route for 10.10.10.241?

There can be cases where an app (e.g. FR) can receive and send udp
packet to a host, but it never even got to the correct interface. In
which case ping or other connectivity test should fail as well.

-- 
Fajar