[FreeRadius] Mac Authen with Centos

[yesi]

On 12/4/20 6:28 PM, Michael Schwartzkopff wrote:
> I assume this is a problem of the switch. If it does not send out RADIUS
> packets, then the RADIUS server cannot receive any.
>
>
> Did you assign the profile to interfaces?
>
> Mit freundlichen Grüßen,
To put in the context, here are the added informations :

  * radius server IP : a.a.a.a
  * switch Huawei IP : b.b.b.b
  * client network IP range e.g. VLAN 25 : c.c.c.c

A client is configured with an IP in the vlan 25.

When connected to a switch port for the MAC Authen, the client can't 
ping the gateway of the VLAN 25.

On the switch,

switch > display access-user

------------------------------------------------------------------------------------------------------
  UserID  Username               IP 
address                               MAC            Status
  ------------------------------------------------------------------------------------------------------

16      toto-account x.x.x.x                              -              
Success
2070    client_mac_address           client_ip_address 
                           client_mac_address   Pre-authen
  ------------------------------------------------------------------------------------------------------


On the Radius server, a local test is OK.

 From the Huawei switch, a test with a test user "bob" is OK. In the 
debug mode, "radiusd -X", we see the packets. When a machine tried to 
connect to the switch, in the debug mode, "radiusd -X", there is no 
message. There are no packets from the capture on the radius server when 
: tcpdump -vnni ens160 src "port 1812 or port 1813" tcpdump -vnni ens160 
src "host b.b.b.b or host c.c.c.c"


For the Huawei Network engineer, the conf on the switch is ok...

I have no idea where to look at.

y.