ICMP 435 Destination unreachable (Communication administratively filtered)

Dennis Schneck dennis.schneck at schulergroup.com
Wed Aug 11 11:50:54 CEST 2021


Hello,
if the Switch sends requests can see only in wireshark this: ICMP 435 
Destination unreachable (Communication administratively filtered)

$ tshark -Y "ip.addr==192.168.1.0/24"
Capturing on 'eth0'
   109 12.985452883   192.168.1.78 → 172.16.1.28 RADIUS 407 
Access-Request id=5
   110 12.985550915 172.16.1.28 → 192.168.1.78   ICMP 435 Destination 
unreachable (Communication administratively filtered)
   173 17.971115508   192.168.1.78 → 172.16.1.28 RADIUS 407 
Access-Request id=5, Duplicate Request
   174 17.971208619 172.16.1.28 → 192.168.1.78   ICMP 435 Destination 
unreachable (Communication administratively filtered)
   205 22.971310597   192.168.1.78 → 172.16.1.28 RADIUS 407 
Access-Request id=5, Duplicate Request
   206 22.971388225 172.16.1.28 → 192.168.1.78   ICMP 435 Destination 
unreachable (Communication administratively filtered)
   247 27.971195313   192.168.1.78 → 172.16.1.28 RADIUS 407 
Access-Request id=5, Duplicate Request
   248 27.971249900 172.16.1.28 → 192.168.1.78   ICMP 435 Destination 
unreachable (Communication administratively filtered)


but in debug mode (raduisd -X) can see nothing.

Listening on auth address * port 1812 bound to server default
Listening on acct address * port 1813 bound to server default
Listening on auth address :: port 1812 bound to server default
Listening on acct address :: port 1813 bound to server default
Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel
Listening on proxy address * port 49780
Listening on proxy address :: port 40915
Ready to process requests


What did I wrong ?



---------------

If I dow a local test with radtest I can see there something

radtest <PC MAC Address> none localhost 10 testing123





More information about the Freeradius-Users mailing list