(RADIATOR) IOS 12.3 POD

[Rabbie Zalaf]

Hi All,

 

We just installed 12.3 on our 7206VXR following advice from CISCO. 

 

Here is the config on the 7206.

 

tried

 

aaa pod server clients xxx.xxx.xx.x auth-type any server-key secretxyz

 

and 

 

aaa pod server clients xxx.xxx.xx.x auth-type any server-key secretxyz

 

ver 12.3(5)

 

radius config

 

aaa group server radius rad-group

ip radius source-interface Loopback0

radius-server host xxx.xxx.xx.x auth-port 1812 acct-port 1813 key 7
6542AB4565123A radius-server key 7 6542AB4565123A

 

debug

 

 

Nov 27 15:01:20 AEDT: POD: xxx.xxx.xx.x request queued

Nov 27 15:01:20 AEDT: POD: Illegal authenticator in POD from xxx.xxx.xx.x
Nov 27 15:01:20 AEDT: POD: xxx.xxx.xx.x user RABBIERULES 0.0.0.0 sessid 0x0
key 0x0 DROPPED Nov 27 15:01:20 AEDT: POD: Sending NAK from port 1700 to
xxx.xxx.xx.x/39403

 

 

Here is the command I am sending:

 

[root at rad root]# radpwtst -trace 4 -acct_port 1700 -secret secretxyz -s
xxx.xxx.xxx.xxx -noauth -noacct -code Disconnect-Request -dictionary
/etc/radiator/dictionary "User-Name=RABBIERULES" "Acct-Session-Id=0000393B"
"Ascend-Session-Svr-Key=F26F9E54"

sending Disconnect-Request...

Packet dump:

*** Sending to xxx.xxx.xxx.xxx port 1700 ....

Code:       Disconnect-Request

Identifier: 66

Authentic:  1234567890123456

Attributes:

        User-Name = "RABBIERULES"

        Acct-Session-Id = "0000393B"

        Ascend-Session-Svr-Key = "F26F9E54"

        

Packet dump:

*** Received from xxx.xxx.xxx.xxx port 1700 ....

Code:       Disconnect-Request-NAKed

Identifier: 66

Authentic:  T<180><182><228>$<193>F<191>LO<202>)<206><222>{<153>

Attributes:

        Reply-Message = "Invalid Authenticator"

 

OK

[root at rad root]#

 

I know that I probably only need one of the three attributes since we have
set auth-type to any but that doesn't work either.

 

Has anyone got the POD working on the 12.3 IOS yet? 

 

Any help would be most appreciated. 

 

Kind Regards,

Rabbie Zalaf
Network Consultant
Leading Edge Internet
02 9497 4024
http://www.leadingedgeinternet.net.au
<http://www.leadingedgeinternet.net.au> 

-----BEGIN GEEK CODE BLOCK-----
VERSION: 3.1
GIT d++ s:>s-:- a22 C++++ L U+++
P+ L+++>$L+++++ E--- W+++ w-- M--
t+++ G++
-----END GEEK CODE BLOCK-----

This document together with any attachments is confidential and is intended
for the named recipient only. It can not be copied, disclosed, passed on or
duplicated in any way shape or form, without the prior permission of the
author. If you are not the intended recipient please contact the author
immediately and destroy the message. All parties acknowledge that any breach
of confidence or disclosures made by any party, (including their employees,
agents and contracted service providers such as solicitors, accountants,
auditors and others), which may result in a commercial loss to Leading Edge
Group, may result in Leading Edge Group exercising such rights as are
available to them in connection with that loss.

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20031127/cc401807/attachment.html>