No subject

attribute 7 (Framed-Protocol) twice. You may want to debug Radiator to see 
why this is happening, but probably this is not what is causing your 
trouble. Besides that, try "debug aaa authentication" and "debug aaa 
authorization" to get a more detailed view of IOS' response. "debug ppp 
negotiation" is already on, isn't it?

On the server side, probably you'll need trace 5 to see the packet in 
detail. CHAP debugging can get very tricky.

regards
cl.


>From: "Miro Majcen" <miro at boter.net>
>To: <radiator at open.com.au>
>Subject: (RADIATOR) decrypt problems
>Date: Wed, 2 Oct 2002 15:13:09 +0200
>
>hello,
>
>i have been trying to get my cisco 3640 to authenticate via radiator. While 
>the exact config works on 26xx , it doesn't work with 3600 Software 
>(C3640-I-M), Version 12.2(5), RELEASE SOFTWARE (fc1)
>
>here is the debug log, any idea what could be causing this ?
>
>1d05h: ISDN BR2/0: RX <- SETUP pd = 8  callref = 0x01
>1d05h:         Sending Complete
>1d05h:         Bearer Capability i = 0x8890
>1d05h:         Channel ID i = 0x89
>1d05h:         Calling Party Number i = 0x01, 0x83, '354', Plan:ISDN, 
>Type:Unknown
>1d05h:         Called Party Number i = 0x80, '374', Plan:Unknown, 
>Type:Unknown
>1d05h: ISDN BR2/0: Event: Received a DATA call from 354 on B1 at 64 Kb/s
>1d05h: ISDN BR2/0: Event: Accepting the call id 0x22
>1d05h: %LINK-3-UPDOWN: Interface BRI2/0:1, changed state to up
>1d05h: BR2/0:1 PPP: Treating connection as a callin
>1d05h: ISDN BR2/0: TX -> CALL_PROC pd = 8  callref = 0x81
>1d05h:         Channel ID i = 0x89
>1d05h: ISDN BR2/0: TX -> CONNECT pd = 8  callref = 0x81
>1d05h: ISDN BR2/0: RX <- CONNECT_ACK pd = 8  callref = 0x01
>1d05h: BR2/0:1 CHAP: O CHALLENGE id 32 len 27 from "Router"
>1d05h: BR2/0:1 CHAP: I RESPONSE id 32 len 25 from "miro"
>1d05h: RADIUS: ustruct sharecount=2
>1d05h: Radius: radius_port_info() success=1 radius_nas_port=1
>1d05h: RADIUS: Initial Transmit BRI2/0:1 id 31 10.10.5.200:1645, 
>Access-Request, len 85
>1d05h:         Attribute 4 6 0A0A6794
>1d05h:         Attribute 5 6 00007531
>1d05h:         Attribute 61 6 00000002
>1d05h:         Attribute 1 6 6D69726F
>1d05h:         Attribute 30 5 3337341F
>1d05h:         Attribute 31 5 33353403
>1d05h:         Attribute 3 19 2061901F
>1d05h:         Attribute 6 6 00000002
>1d05h:         Attribute 7 6 00000001
>1d05h: RADIUS: Received from id 31 10.10.5.200:1645, Access-Accept, len 74
>1d05h:         Attribute 8 6 0A0A0302
>1d05h:         Attribute 7 6 00000001
>1d05h:         Attribute 6 6 00000002
>1d05h:         Attribute 7 6 00000001
>1d05h:         Attribute 9 6 FFFFFFFF
>1d05h:         Attribute 10 6 00000000
>1d05h:         Attribute 12 6 000005DC
>1d05h:         Attribute 13 6 00000001
>1d05h:         Attribute 28 6 00000384
>1d05h: RADIUS: Response (31) failed decrypt
>1d05h: RADIUS: Reply for 31 fails decrypt
>1d05h: BR2/0:1 CHAP: Unable to validate Response.  Username miro: 
>Authentication failure
>1d05h: BR2/0:1 CHAP: O FAILURE id 32 len 26 msg is "Authentication failure"
>1d05h: ISDN BR2/0: RX <- DISCONNECT pd = 8  callref = 0x01
>1d05h:         Cause i = 0x8090 - Normal call clearing
>1d05h: %ISDN-6-CONNECT: Interface BRI2/0:1 is now connected to 354 1a8e01
>1d05h: %LINK-3-UPDOWN: Interface BRI2/0:1, changed state to down
>1d05h: ISDN BR2/0: TX -> RELEASE pd = 8  callref = 0x81
>1d05h:         Cause i = 0x8090 - Normal call clearing
>1d05h: ISDN BR2/0: RX <- RELEASE_COMP pd = 8  callref = 0x01
>
>
>Thanks
>
>Miro
>
>
>




_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.