ICMP 435 Destination unreachable (Communication administratively filtered)
Dennis Schneck
dennis.schneck at schulergroup.com
Wed Aug 11 11:50:54 CEST 2021
Hello,
if the Switch sends requests can see only in wireshark this: ICMP 435
Destination unreachable (Communication administratively filtered)
$ tshark -Y "ip.addr==192.168.1.0/24"
Capturing on 'eth0'
109 12.985452883 192.168.1.78 → 172.16.1.28 RADIUS 407
Access-Request id=5
110 12.985550915 172.16.1.28 → 192.168.1.78 ICMP 435 Destination
unreachable (Communication administratively filtered)
173 17.971115508 192.168.1.78 → 172.16.1.28 RADIUS 407
Access-Request id=5, Duplicate Request
174 17.971208619 172.16.1.28 → 192.168.1.78 ICMP 435 Destination
unreachable (Communication administratively filtered)
205 22.971310597 192.168.1.78 → 172.16.1.28 RADIUS 407
Access-Request id=5, Duplicate Request
206 22.971388225 172.16.1.28 → 192.168.1.78 ICMP 435 Destination
unreachable (Communication administratively filtered)
247 27.971195313 192.168.1.78 → 172.16.1.28 RADIUS 407
Access-Request id=5, Duplicate Request
248 27.971249900 172.16.1.28 → 192.168.1.78 ICMP 435 Destination
unreachable (Communication administratively filtered)
but in debug mode (raduisd -X) can see nothing.
Listening on auth address * port 1812 bound to server default
Listening on acct address * port 1813 bound to server default
Listening on auth address :: port 1812 bound to server default
Listening on acct address :: port 1813 bound to server default
Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel
Listening on proxy address * port 49780
Listening on proxy address :: port 40915
Ready to process requests
What did I wrong ?
---------------
If I dow a local test with radtest I can see there something
radtest <PC MAC Address> none localhost 10 testing123
More information about the Freeradius-Users
mailing list