FW: Need help with EAP-AKA configuration

Mrudul Dighe mdighe at highway9networks.com
Wed Apr 26 18:11:16 UTC 2023


Hello,

I am trying to configure EAP-AKA virtual-server in FreeRADIUS to perform authentication of multiple sim cards we own. We have followed the documentation and configured below in sites-enabled/eap-aka-sim and able to authenticate successful with EAPOL_TEST tool using same Ki and OPc:

<<<<<<<<<<<<<<<<<<<<<<<<<<<<

send Challenge-Request {

                &control.SIM-Ki  := 0x465b5ce8b199b49faa5f0a2ee238a6bc

                &control.SIM-Opc := 0xcd63cb71954a9f4e48a5994e37a02baf

                &control.SIM-SQN := 3

}

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>



However, this helps in authenticating only the imsi with above Ki/OPc. But our requirement is to authenticate multiple such IMSIs/SIMs with their Ki/OPc whose values we are aware of.

May I know how to specify the list of imsi/Users and make it work instead of hardcoding like above?



We tried adding following line in 'users' file in raddb/ folder and removed above hardcoding in Challenge-Response part of eap-aka-sim virtual-server configuration :

"315010000000002 at wlan.mnc010.mcc315.3gppnetwork.org<mailto:315010000000002 at wlan.mnc010.mcc315.3gppnetwork.org>      SIM-Ki  := 770db7f9275c47eb3d12b2024caa3548, SIM-Opc := 6245aedadf3ebbb82b0f62df52e0de12, SIM-SQN := 3"



But it's not working.

I have attached the radiusd Logs with the mail. Where I see following error -

"""

(0.0)    eap-aka-sim - WARNING: Could not find or derive data for UMTS vector

(0.0)    eap-aka-sim - ERROR: Failed retrieving UMTS vectors

"""



Summary of my setup:

  *   FreeRadius version4 -  Configured, compiled and installed from master Branch
  *   wpa_supplicant version 2.10
  *   Ubuntu 20.04 LTS



Any help would be greatly appreciated. Thank you in advance.

Best regards,

Mrudul Dighe.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: eap_aka_freeradius.log
Type: application/octet-stream
Size: 48163 bytes
Desc: eap_aka_freeradius.log
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20230426/de74630e/attachment-0001.obj>


More information about the Freeradius-Users mailing list