(RADIATOR) Static IPs for users

cistron cistron at neduet.edu.pk
Thu Apr 18 10:48:33 CDT 2002


While trying to get static IPs for users I found that at the 3640 NAS I
had to give
aaa authorization network radius otherwise it would not get the IP from
Radiator Radius (3.0).

I am using ios 12.2(8) T.  Can someone kindly help me in finding out
where I am making a mistake.

Thanks and Regards

Following is the debug output at access server.

----------------------------------------------------------------------------------------

*Mar  2 00:24:05.261: As98 LCP: I CONFACK [ACKsent] id 141 len 24
*Mar  2 00:24:05.261: As98 LCP:    ACCM 0x000A0000 (0x0206000A0000)
*Mar  2 00:24:05.261: As98 LCP:    AuthProto PAP (0x0304C023)
*Mar  2 00:24:05.261: As98 LCP:    MagicNumber 0x15B80E95
(0x050615B80E95)
*Mar  2 00:24:05.261: As98 LCP:    PFC (0x0702)
*Mar  2 00:24:05.265: As98 LCP:    ACFC (0x0802)
*Mar  2 00:24:05.265: As98 LCP: State is Open
*Mar  2 00:24:05.265: As98 PPP: Phase is AUTHENTICATING, by this end
*Mar  2 00:24:05.269: As98 PAP: I AUTH-REQ id 6 len 23 from
"city at INTERNAL"
*Mar  2 00:24:05.273: As98 PAP: Authenticating peer city at INTERNAL
*Mar  2 00:24:05.349: As98 PAP: O AUTH-ACK id 6 len 5
*Mar  2 00:24:05.349: As98 PPP: Phase is UP
*Mar  2 00:24:05.349: As98 IPCP: O CONFREQ [Closed] id 98 len 10
*Mar  2 00:24:05.349: As98 IPCP:    Address 202.5.150.1
(0x0306CA059601)
*Mar  2 00:24:05.361: As98 PPP: Outbound context-status packet dropped,
IPCP sta
te is REQsent
*Mar  2 00:24:05.377: As98 PPP: Outbound context-status packet dropped,
IPCP sta
te is REQsent
*Mar  2 00:24:05.381: As98 IPCP: O CONFREQ [REQsent] id 99 len 16
*Mar  2 00:24:05.381: As98 IPCP:    CompressType VJ 15 slots
(0x0206002D0F00)
*Mar  2 00:24:05.381: As98 IPCP:    Address 202.5.150.1
(0x0306CA059601)
*Mar  2 00:24:05.381: As98 IPCP: O CONFREQ [REQsent] id 100 len 16
*Mar  2 00:24:05.381: As98 IPCP:    CompressType VJ 15 slots
(0x0206002D0F00)
*Mar  2 00:24:05.381: As98 IPCP:    Address 202.5.150.1
(0x0306CA059601)
*Mar  2 00:24:05.517: As98 IPCP: I CONFREQ [REQsent] id 2 len 16
*Mar  2 00:24:05.517: As98 IPCP:    CompressType VJ 15 slots
CompressSlotID (0x0
206002D0F01)
*Mar  2 00:24:05.517: As98 IPCP:    Address 0.0.0.0 (0x030600000000)
*Mar  2 00:24:05.517: As98 AAA/AUTHOR/IPCP: Start.  Her address
0.0.0.0, we want
 0.0.0.0
*Mar  2 00:24:05.517: As98 LCP: O PROTREJ [Open] id 142 len 22 protocol
IPCP
*Mar  2 00:24:05.521: As98 LCP:  (0x8021010200100206002D0F0103060000)
*Mar  2 00:24:05.521: As98 LCP:  (0x0000)
*Mar  2 00:24:05.521: As98 IPCP: State is Closed
*Mar  2 00:24:05.525: As98 IPCP: I CONFACK [Closed] id 98 len 10
*Mar  2 00:24:05.525: As98 IPCP:    Address 202.5.150.1
(0x0306CA059601)
*Mar  2 00:24:05.525: As98 IPCP: Lower layer not up, discarding packet
*Mar  2 00:24:05.553: As98 IPCP: I CONFACK [Closed] id 99 len 16
*Mar  2 00:24:05.553: As98 IPCP:    CompressType VJ 15 slots
(0x0206002D0F00)
*Mar  2 00:24:05.553: As98 IPCP:    Address 202.5.150.1
(0x0306CA059601)
*Mar  2 00:24:05.553: As98 IPCP: Lower layer not up, discarding packet
*Mar  2 00:24:05.557: As98 IPCP: I CONFACK [Closed] id 100 len 16
*Mar  2 00:24:05.557: As98 IPCP:    CompressType VJ 15 slots
(0x0206002D0F00)
*Mar  2 00:24:05.557: As98 IPCP:    Address 202.5.150.1
(0x0306CA059601)
*Mar  2 00:24:05.557: As98 IPCP: Lower layer not up, discarding packet
*Mar  2 00:24:05.697: As98 LCP: I TERMREQ [Open] id 3 len 16
(0x3B843FF8003CCD74
00000000)

-------------------------------------------------------------------------------

The Radiator config file is given below

------------------------------------------------------------------------------------




Foreground
LogStdout
LogDir  .
DbDir  .
Trace 4
AuthPort 1645
AcctPort 1646
# You will probably want to change this to suit your site.
<Client 204.5.150.1>
 Secret abc
 DupInterval 0
</Client>
<Client 192.168.1.7>
 Secret xyz
 DupInterval 0
</Client>
<Client DEFAULT>
 Secret abx
 DupInterval 0
</Client>


<Realm INTERNAL>
    <AuthBy FILE>
 AddToReply Service-Type = Framed-User, \
 Framed-Protocol = PPP, \
 Framed-Routing = None, \
 Framed-MTU = 1500, \
 Framed-Compression = Van-Jacobson-TCP-IP, \
 Idle-Timeout = 900, \
 Session-Timeout = 1800
    </AuthBy>
</Realm>

-----------------------------------------------------------------------------------------

Users file is given below

-----------------------------------------------------------------------------------------

city at INTERNAL User-Password = "xyz", Service-Type = Framed-User
        Framed-Protocol = PPP,
        Framed-IP-Netmask = 255.255.255.254,
        Framed-IP-Address = 202.5.150.250,
        Framed-Routing = None,
        Framed-MTU = 1500,
 Framed-Compression = Van-Jacobson-TCP-IP,
 Idle-Timeout = 900,
 Session-Timeout = 1800

-------------------------------------------------------------------------------------------

trace 4 debug logs at the Radiator are given below

--------------------------------------------------------------------------------------------





Thu Apr 18 16:15:29 2002: DEBUG: Packet dump:
*** Received from 202.5.150.1 port 1645 ....
Code:       Access-Request
Identifier: 104
Authentic:  <185><17>~x_<167><160><229><17><7><144><209><4><29><232>9
Attributes:
 Framed-Protocol = PPP
 User-Name = "city at INTERNAL"
 User-Password =
"<199>%<136>H<226>]<165>c<178><224><156><10><193><139><253><214>"
 NAS-Port = 98
 NAS-Port-Type = Async
 Calling-Station-Id = "async"
 Service-Type = Framed-User
 NAS-IP-Address = 202.5.150.1

Thu Apr 18 16:15:29 2002: DEBUG: Handling request with Handler
'Realm=INTERNAL'
Thu Apr 18 16:15:29 2002: DEBUG:  Deleting session for city at INTERNAL,
202.5.150.1, 98
Thu Apr 18 16:15:29 2002: DEBUG: do query is: update serverports set
acctstatustype='' where port=98 and ipaddress='202.5.150.1'

Thu Apr 18 16:15:30 2002: DEBUG: Handling with Radius::AuthFILE:
Thu Apr 18 16:15:30 2002: DEBUG: Radius::AuthFILE looks for match with
city at INTERNAL
Thu Apr 18 16:15:30 2002: DEBUG: Radius::AuthFILE ACCEPT:
Thu Apr 18 16:15:30 2002: DEBUG: Access accepted for city at INTERNAL
Thu Apr 18 16:15:30 2002: DEBUG: Packet dump:
*** Sending to 202.5.150.1 port 1645 ....
Code:       Access-Accept
Identifier: 104
Authentic:  <185><17>~x_<167><160><229><17><7><144><209><4><29><232>9
Attributes:
 Framed-IP-Address = 202.5.150.250
 Framed-Protocol = PPP
 Framed-IP-Netmask = 255.255.255.254
 Framed-Routing = None
 Framed-MTU = 1500
 Framed-Compression = Van-Jacobson-TCP-IP
 Idle-Timeout = 900
 Session-Timeout = 1800
 Service-Type = Framed-User
 Framed-Protocol = PPP
 Framed-Routing = None
 Framed-MTU = 1500
 Framed-Compression = Van-Jacobson-TCP-IP
 Idle-Timeout = 900
 Session-Timeout = 1800

Thu Apr 18 16:15:30 2002: DEBUG: Packet dump:
*** Received from 202.5.150.1 port 1646 ....
Code:       Accounting-Request
Identifier: 79
Authentic:  <139>H<182>_<254>Q<187><213>5lu<241>_<221>,<28>
Attributes:
 Acct-Session-Id = "000002CC"
 Framed-Protocol = PPP
 Connect-Info = "21600/19200 V34/V42bis/LAPM"
 Acct-Authentic = RADIUS
 User-Name = "city at INTERNAL"
 Acct-Status-Type = Start
 NAS-Port = 98
 NAS-Port-Type = Async
 Calling-Station-Id = "async"
 Service-Type = Framed-User
 NAS-IP-Address = 202.5.150.1
 Acct-Delay-Time = 0

Thu Apr 18 16:15:30 2002: DEBUG: Handling request with Handler
'Realm=INTERNAL'
Thu Apr 18 16:15:30 2002: DEBUG:  Adding session for city at INTERNAL,
202.5.150.1, 98
Thu Apr 18 16:15:30 2002: DEBUG: do query is: update serverports set
acctstatustype='Start' where port=98 and ipaddress='202.5.150.1'

Thu Apr 18 16:15:30 2002: DEBUG: do query is: update serverports set

username='city at INTERNAL',acctstatustype='Start',framedaddress='',callstationid='async',calldate=to_date('2002-04-18

16:15:30','yyyy-mm-dd HH24:MI:SS') where port=98 and
ipaddress='202.5.150.1'

Thu Apr 18 16:15:30 2002: DEBUG: Handling with Radius::AuthFILE:
Thu Apr 18 16:15:30 2002: DEBUG: Accounting accepted
Thu Apr 18 16:15:30 2002: DEBUG: Packet dump:
*** Sending to 202.5.150.1 port 1646 ....
Code:       Accounting-Response
Identifier: 79
Authentic:  <139>H<182>_<254>Q<187><213>5lu<241>_<221>,<28>
Attributes:

Thu Apr 18 16:15:30 2002: DEBUG: Packet dump:
*** Received from 202.5.150.1 port 1646 ....
Code:       Accounting-Request
Identifier: 80
Authentic:  <211><5><1><196><182><177>u<154><128><178><202><198>lrBM
Attributes:
 Acct-Session-Id = "000002CC"
 Framed-Protocol = PPP
 User-Name = "city at INTERNAL"
 Acct-Session-Time = 0
 Connect-Info = "21600/19200 V34/V42bis/LAPM"
 Acct-Input-Octets = 86
 Acct-Output-Octets = 88
 Acct-Input-Packets = 5
 Acct-Output-Packets = 5
 Acct-Terminate-Cause = User-Request
 Acct-Authentic = RADIUS
 User-Name = "city at INTERNAL"
 Acct-Status-Type = Stop
 NAS-Port = 98
 NAS-Port-Type = Async
 Calling-Station-Id = "async"
 Service-Type = Framed-User
 NAS-IP-Address = 202.5.150.1
 Acct-Delay-Time = 0

Thu Apr 18 16:15:30 2002: DEBUG: Handling request with Handler
'Realm=INTERNAL'
Thu Apr 18 16:15:30 2002: DEBUG:  Deleting session for city at INTERNAL,
202.5.150.1, 98
Thu Apr 18 16:15:30 2002: DEBUG: do query is: update serverports set
acctstatustype='Stop' where port=98 and ipaddress='202.5.150.1'

Thu Apr 18 16:15:30 2002: DEBUG: Handling with Radius::AuthFILE:
Thu Apr 18 16:15:30 2002: DEBUG: Accounting accepted
Thu Apr 18 16:15:30 2002: DEBUG: Packet dump:
*** Sending to 202.5.150.1 port 1646 ....
Code:       Accounting-Response
Identifier: 80
Authentic:  <211><5><1><196><182><177>u<154><128><178><202><198>lrBM
Attributes:








===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list