[RADIATOR] Problem Using Radiator to Authenticate Huawei Broadband RAS Users

Tue Nov 11 22:57:04 CST 2008

Hi,
I'm using radiator 3.13
I have problems authenticating users.
The remote access using Huawei.

The problems only appear when I define Framed Route reply attribute in radiator users.
If the attribute is not define, there is no problem authenticating users.

I have debug the radiator and found this error in my logfile:
Please help.

Code:       Access-Accept
Identifier: 224
Authentic:  A*<253><227><254>[<146><222><176><185><214>/<8><24><2>)
Attributes:
        Framed-IP-Address = 202.155.27.133
        Framed-Route = "202.155.27.252/30"
        Framed-IP-Netmask = 255.255.255.255

Wed Nov 12 10:12:12 2008: ERR: Attribute number 60 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:12 2008: ERR: Attribute number 26 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:12 2008: ERR: Attribute number 254 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:12 2008: ERR: Attribute number 255 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:12 2008: ERR: Attribute number 138 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:12 2008: DEBUG: Packet dump:
*** Received from 172.16.203.24 port 1812 ....

Packet length = 309
01 df 01 35 03 60 61 c4 56 5c c5 6d 07 79 09 24
32 e7 16 8b 01 20 32 32 32 37 31 35 32 32 30 30
30 32 40 73 69 73 74 65 6c 69 6e 64 6f 2e 6e 65
74 2e 69 64 03 13 01 fe 81 20 39 16 29 23 50 22
2b c5 c2 1f 39 4b d1 3c 12 03 60 61 c4 56 5c c5
6d 07 79 09 24 32 e7 16 8b 05 06 01 00 16 57 04
06 ac 10 cb 18 06 06 00 00 00 02 07 06 00 00 00
01 1f 13 30 30 3a 31 61 3a 37 30 3a 39 35 3a 61
38 3a 61 66 20 0d 42 52 41 53 2d 44 32 2d 53 4d
32 3d 06 00 00 00 0f 57 22 44 53 4c 41 4d 30 30
2d 44 32 2d 53 4d 32 20 61 74 6d 20 30 2f 31 31
2f 30 2f 32 3a 30 2e 33 35 2c 22 42 52 41 53 2d
44 32 30 31 30 30 31 30 30 30 30 30 31 36 32 33
39 62 37 31 61 36 36 32 33 32 39 1a 5a 00 00 07
db 3c 23 32 35 35 2e 32 35 35 2e 32 35 35 2e 32
35 35 20 30 30 3a 31 61 3a 37 30 3a 39 35 3a 61
38 3a 61 66 1a 06 00 00 f3 79 fe 10 48 75 61 77
65 69 20 4d 41 35 32 30 30 47 ff 08 4d 41 35 32
30 30 8a 13 73 69 73 74 65 6c 69 6e 64 6f 2e 6e
65 74 2e 69 64
Code:       Access-Request
Identifier: 223
Authentic:  <3>`a<196>V\<197>m<7>y<9>$2<231><22><139>
Attributes:
        User-Name = "222715220002 at sis.com"
        CHAP-Password = <1><254><129> 9<22>)#P"+<197><194><31>9K<209>
        CHAP-Challenge = <3>`a<196>V\<197>m<7>y<9>$2<231><22><139>
        NAS-Port = 16782935
        NAS-IP-Address = 172.16.203.24
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "00:1a:70:95:a8:af"
        NAS-Identifier = "BRAS-D2-SM2"
        NAS-Port-Type = Ethernet
        NAS-Port-Id = "DSLAM00-D2-SM2 atm 0/11/0/2:0.35"
        Acct-Session-Id = "BRAS-D2010010000016239b71a662329"

Wed Nov 12 10:12:12 2008: DEBUG: Handling request with Handler 'Realm=sistelindo
.net.id'
Wed Nov 12 10:12:12 2008: DEBUG: Rewrote user name to 222715220002
Wed Nov 12 10:12:12 2008: DEBUG:  Deleting session for 222715220002 at sistelindo.n
et.id, 172.16.203.24, 16782935
Wed Nov 12 10:12:12 2008: DEBUG: do query is: 'delete from RADONLINE where NASID
ENTIFIER='172.16.203.24' and NASPORT=016782935': 
Wed Nov 12 10:12:12 2008: DEBUG: Handling with Radius::AuthRADMIN
Wed Nov 12 10:12:12 2008: DEBUG: Handling with Radius::AuthRADMIN: 
Wed Nov 12 10:12:12 2008: DEBUG: Query is: 'select PASS_WORD from RADUSERS where
USERNAME='222715220002'': 
Wed Nov 12 10:12:12 2008: DEBUG: Query is: 'select ATTR_ID, VENDOR_ID, IVALUE, S
VALUE, ITEM_TYPE from RADCONFIG where NAME='222715220002' order by ITEM_TYPE': 
Wed Nov 12 10:12:12 2008: DEBUG: Radius::AuthRADMIN looks for match with 2227152
20002
Wed Nov 12 10:12:12 2008: DEBUG: do query is: 'update RADUSERS set BADLOGINS=0 w
here USERNAME='222715220002'': 
Wed Nov 12 10:12:12 2008: DEBUG: AuthBy RADMIN result: ACCEPT, 
Wed Nov 12 10:12:12 2008: DEBUG: Access accepted for 222715220002
Wed Nov 12 10:12:12 2008: DEBUG: do query is: 'insert into RADAUTHLOG (TIME_STAM
P, USERNAME, TYPE) values (1226459532, '222715220002', 1)': 
Wed Nov 12 10:12:12 2008: DEBUG: Packet dump:
*** Sending to 172.16.203.24 port 1812 ....

Packet length = 51
02 df 00 33 6b aa 35 af 45 63 d3 28 3b 69 be 02
52 66 36 bf 08 06 ca 99 1b 85 16 13 32 30 32 2e
31 35 33 2e 32 37 2e 32 35 32 2f 33 30 09 06 ff
ff ff ff
Code:       Access-Accept
Identifier: 223
Authentic:  <3>`a<196>V\<197>m<7>y<9>$2<231><22><139>
Attributes:
        Framed-IP-Address = 202.155.27.133
        Framed-Route = "202.155.27.252/30"
        Framed-IP-Netmask = 255.255.255.255

Wed Nov 12 10:12:23 2008: ERR: Attribute number 60 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:23 2008: ERR: Attribute number 26 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:23 2008: ERR: Attribute number 254 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:23 2008: ERR: Attribute number 255 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:23 2008: ERR: Attribute number 138 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:23 2008: DEBUG: Packet dump:
*** Received from 172.16.203.24 port 1812 ....

Packet length = 309
01 e1 01 35 23 35 4b f7 5d e9 d4 da 95 98 06 e6
2e 45 82 1b 01 20 32 32 32 37 31 35 32 32 30 30
30 32 40 73 69 73 74 65 6c 69 6e 64 6f 2e 6e 65
74 2e 69 64 03 13 01 25 48 28 55 62 cc 68 1b 32
42 29 90 bd 57 f6 a8 3c 12 23 35 4b f7 5d e9 d4
da 95 98 06 e6 2e 45 82 1b 05 06 01 00 16 57 04
06 ac 10 cb 18 06 06 00 00 00 02 07 06 00 00 00
01 1f 13 30 30 3a 31 61 3a 37 30 3a 39 35 3a 61
38 3a 61 66 20 0d 42 52 41 53 2d 44 32 2d 53 4d
32 3d 06 00 00 00 0f 57 22 44 53 4c 41 4d 30 30
2d 44 32 2d 53 4d 32 20 61 74 6d 20 30 2f 31 31
2f 30 2f 32 3a 30 2e 33 35 2c 22 42 52 41 53 2d
44 32 30 31 30 30 31 30 30 30 30 30 31 36 32 33
34 30 38 38 38 36 35 31 33 31 31 1a 5a 00 00 07
db 3c 23 32 35 35 2e 32 35 35 2e 32 35 35 2e 32
35 35 20 30 30 3a 31 61 3a 37 30 3a 39 35 3a 61
38 3a 61 66 1a 06 00 00 c8 6f fe 10 48 75 61 77
65 69 20 4d 41 35 32 30 30 47 ff 08 4d 41 35 32
30 30 8a 13 73 69 73 74 65 6c 69 6e 64 6f 2e 6e
65 74 2e 69 64
Code:       Access-Request
Identifier: 225
Authentic:  #5K<247>]<233><212><218><149><152><6><230>.E<130><27>
Attributes:
        User-Name = "222715220002 at sis.com"
        CHAP-Password = <1>%H(Ub<204>h<27>2B)<144><189>W<246><168>
        CHAP-Challenge = #5K<247>]<233><212><218><149><152><6><230>.E<130><27>
        NAS-Port = 16782935
        NAS-IP-Address = 172.16.203.24
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "00:1a:70:95:a8:af"
        NAS-Identifier = "BRAS-D2-SM2"
        NAS-Port-Type = Ethernet
        NAS-Port-Id = "DSLAM00-D2-SM2 atm 0/11/0/2:0.35"
        Acct-Session-Id = "BRAS-D20100100000162340888651311"

Wed Nov 12 10:12:23 2008: DEBUG: Handling request with Handler 'Realm=sistelindo
.net.id'
Wed Nov 12 10:12:23 2008: DEBUG: Rewrote user name to 222715220002
Wed Nov 12 10:12:23 2008: DEBUG:  Deleting session for 222715220002 at sistelindo.n
et.id, 172.16.203.24, 16782935
Wed Nov 12 10:12:23 2008: DEBUG: do query is: 'delete from RADONLINE where NASID
ENTIFIER='172.16.203.24' and NASPORT=016782935': 
Wed Nov 12 10:12:23 2008: DEBUG: Handling with Radius::AuthRADMIN
Wed Nov 12 10:12:23 2008: DEBUG: Handling with Radius::AuthRADMIN: 
Wed Nov 12 10:12:23 2008: DEBUG: Query is: 'select PASS_WORD from RADUSERS where
USERNAME='222715220002'': 
Wed Nov 12 10:12:23 2008: DEBUG: Query is: 'select ATTR_ID, VENDOR_ID, IVALUE, S
VALUE, ITEM_TYPE from RADCONFIG where NAME='222715220002' order by ITEM_TYPE': 
Wed Nov 12 10:12:23 2008: DEBUG: Radius::AuthRADMIN looks for match with 2227152
20002
Wed Nov 12 10:12:23 2008: DEBUG: do query is: 'update RADUSERS set BADLOGINS=0 w
here USERNAME='222715220002'': 
Wed Nov 12 10:12:23 2008: DEBUG: AuthBy RADMIN result: ACCEPT, 
Wed Nov 12 10:12:23 2008: DEBUG: Access accepted for 222715220002
Wed Nov 12 10:12:23 2008: DEBUG: do query is: 'insert into RADAUTHLOG (TIME_STAM
P, USERNAME, TYPE) values (1226459543, '222715220002', 1)': 
Wed Nov 12 10:12:23 2008: DEBUG: Packet dump:
*** Sending to 172.16.203.24 port 1812 ....

Packet length = 51
02 e1 00 33 d3 de a7 69 19 df ea 90 ca 45 e5 94
d3 3e 8c 66 08 06 ca 99 1b 85 16 13 32 30 32 2e
31 35 33 2e 32 37 2e 32 35 32 2f 33 30 09 06 ff
ff ff ff
Code:       Access-Accept
Identifier: 225
Authentic:  #5K<247>]<233><212><218><149><152><6><230>.E<130><27>
Attributes:
        Framed-IP-Address = 202.155.27.133
        Framed-Route = "202.155.27.252/30"
        Framed-IP-Netmask = 255.255.255.255

Wed Nov 12 10:12:24 2008: ERR: Attribute number 60 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 1 (vendor 2011) is not defined i
n your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 2 (vendor 2011) is not defined i
n your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 4 (vendor 2011) is not defined i
n your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 5 (vendor 2011) is not defined i
n your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 22 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 26 (vendor 2011) is not defined 
in your dictionary
Wed Nov 12 10:12:24 2008: ERR: Attribute number 138 (vendor 2011) is not defined
in your dictionary
Wed Nov 12 10:12:24 2008: DEBUG: Packet dump:
*** Received from 172.20.91.30 port 1812 ....