(RADIATOR) MikroTIK
Dejan Tanasijevic
dejan at HEMOFARM.CO.YU
Wed Mar 9 08:48:38 CST 2005
A use Mikrotik Router (www.mikrotik.com <http://www.mikrotik.com/> ) for
wireless user access. Client is Windows XP, authenticate through PPTP or
PPPoE on wireless interface. When I connect with local account and
ecryption ON (on XP) there is no problem. But when I try to authenticate
with radius Radiator radius server problem is that it works only if I
turn off encryption on Windows XP client. Logs on radius server show
that he accept request in both scenario, but with encryption turn on
Mikrotik do not allow connection. I suggest that problem is with access
accept packet from radius server to Mikrotik. Here is log from radius.
*** Received from 194.106.161.138 port 1024 ....
Code: Access-Request
Identifier: 127
Authentic: xp<174>Z<188><13><254>$<164><201>w<186>r<200>F<198>
Attributes:
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Identifier = "MikroTik"
NAS-Port = 100
NAS-Port-Type = Virtual
User-Name = "dejan"
Calling-Station-Id = "10.1.1.100"
Called-Station-Id = "10.1.1.2"
MS-CHAP-Challenge =
"Zd<184><184>N<27><232><188><<166>]<6><216><10><14>l"
MS-CHAP2-Response =
"<1><0><220>x<224><135>7<191><160><247>!<152>6<145>v<194>G<245><0><0><0>
<0><0><0><0><0><236>(<195><248><17><220><129><229>i!<252>E<150>f<193>d>u
<150><174>#<148><193><129>"
NAS-IP-Address = 194.106.161.138
Wed Mar 9 15:21:55 2005: DEBUG: Rewrote user name to dejan
Wed Mar 9 15:21:55 2005: DEBUG: Handling request with Handler
'NAS-IP-Address=194.106.161.138'
Wed Mar 9 15:21:55 2005: DEBUG: Rewrote user name to dejan
Wed Mar 9 15:21:55 2005: DEBUG: Handling with Radius::AuthLSA:
Wed Mar 9 15:21:55 2005: DEBUG: Radius::AuthLSA looks for match with
dejan
Wed Mar 9 15:21:55 2005: DEBUG: Radius::AuthLSA ACCEPT:
Wed Mar 9 15:21:55 2005: DEBUG: Access accepted for dejan
Wed Mar 9 15:21:55 2005: DEBUG: Packet dump:
*** Sending to 194.106.161.138 port 1024 ....
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20050309/1b042ed8/attachment.html>
More information about the radiator
mailing list