[RADIATOR] rapwtst and CoA-Request Error-Cause

Hugh Irvine hugh at open.com.au
Fri Jul 30 06:20:42 CDT 2010


Hello Vangelis -

You are quite right - I'll fix this tomorrow.

regards

Hugh


On 30 Jul 2010, at 17:04, Vangelis Kyriakakis wrote:

> Hello Hugh, Bruno,
> 
>        I'm using -trace 4. Here is the log output of both the NAS and the radpwtst:
> 
> NAS:
> Jul 26 18:17:03.173: RADIUS: COA  received from id 48 xxx.xxx.xxx.xxx:11678, CoA Request, len 77
> Jul 26 18:17:03.173: COA: 212.251.84.21 request queued
> Jul 26 18:17:03.173: RADIUS:  authenticator 65 1B F5 01 6D 6F 96 A1 - CA 21 E3 21 EC 89 AC D7
> Jul 26 18:17:03.173: RADIUS:  Vendor, Cisco       [26]  47 
> Jul 26 18:17:03.173: RADIUS:   Cisco AVpair       [1]   41  "ip:sub-qos-policy-in=ADSL-10Mbps-policy"
> Jul 26 18:17:03.173: RADIUS:  Acct-Session-Id     [44]  10  "015B4AA9"
> Jul 26 18:17:03.173:  ++++++ CoA Attribute List ++++++
> Jul 26 18:17:03.173: 231FC340 0 00000009 sub-qos-policy-in(371) 18 ADSL-10Mbps-policy
> Jul 26 18:17:03.173: 231F3BD4 0 00000001 session-id(362) 4 22760105(15B4AA9)
> Jul 26 18:17:03.173:
> Jul 26 18:17:03.173: RADIUS(00000000): sending
> Jul 26 18:17:03.173: RADIUS(00000000): Send CoA Nack Response to xxx.xxx.xxx.xxx:11678 id 48, len 88
> Jul 26 18:17:03.173: RADIUS:  authenticator B5 AC 44 56 F1 9B 50 02 - 9C 2F BA 91 02 11 E0 EB
> Jul 26 18:17:03.173: RADIUS:  Vendor, Cisco       [26]  44 
> Jul 26 18:17:03.173: RADIUS:   Cisco AVpair       [1]   38  "sub-qos-policy-in=ADSL-10Mbps-policy"
> Jul 26 18:17:03.173: RADIUS:  Reply-Message       [18]  18 
> Jul 26 18:17:03.173: RADIUS:   4E 6F 20 76 61 6C 69 64 20 53 65 73 73 69 6F 6E  [ No valid Session]
> Jul 26 18:17:03.173: RADIUS:  Dynamic-Author-Error[101] 6   Session Context Not Found [503]
> 
> radpwtst:
> 
> Mon Jul 26 18:17:03 2010: DEBUG: Reading dictionary file '/etc/radiator/dictionary'
> sending Change-Filter-Request...
> Mon Jul 26 18:17:03 2010: DEBUG: Packet dump:
> *** Sending to XXX.XXX.XXX.XXX port 1816 ....
> Code:       Change-Filter-Request
> 
> Identifier: 48
> Authentic:  e<27><245><1>mo<150><161><202>!<227>!<236><137><172><215>
> Attributes:
>         cisco-avpair = "ip:sub-qos-policy-in=ADSL-10Mbps-policy"
>         Acct-Session-Id = "015B4AA9"
> 
> OK
> 
> As you can see although the NAS sends back a CoA-NAK packet with Session Context Not Found, radpwtst outputs just OK.
> Any Ideas?
> 
>               Regards
>                      Vangelis
> 
> 
> On 30/7/2010 1:11 πμ, Hugh Irvine wrote:
>> Hello Vangelis -
>> 
>> Bruno is correct -
>> 
>> 	perl radpwtst -trace 4 ……
>> 
>> regards
>> 
>> Hugh
>> 
>> 
>> On 30 Jul 2010, at 00:08, Bruno Tiago Rodrigues wrote:
>> 
>> 
>>> Vangelis:
>>> Have you tried adding the -trace option to radpwtst?
>>> 
>>> On Jul 29, 2010, at 12:48 PM, Vangelis Kyriakakis wrote:
>>> 
>>> 
>>>> Hello,
>>>> 
>>>>     We are using radpwtst to send CoA packets to a Cisco NAS. If there 
>>>> is a problem the NAS sends back a CoA NAK packet which contains the 
>>>> Error-Cause attribute. Radpwtst just reports OK without taking note of 
>>>> the Error-Cause attribute. Is there any way to print it?
>>>> 
>>>>               Regards
>>>>                    Vangelis
>>>> _______________________________________________
>>>> radiator mailing list
>>>> 
>>>> radiator at open.com.au
>>>> http://www.open.com.au/mailman/listinfo/radiator
>>> _______________________________________________
>>> radiator mailing list
>>> 
>>> radiator at open.com.au
>>> http://www.open.com.au/mailman/listinfo/radiator
>> 
>> 
>> NB: 
>> 
>> Have you read the reference manual ("doc/ref.html")?
>> Have you searched the mailing list archive (
>> www.open.com.au/archives/radiator
>> )?
>> Have you had a quick look on Google (
>> www.google.com
>> )?
>> Have you included a copy of your configuration file (no secrets), 
>> together with a trace 4 debug showing what is happening?
>> 
>> 



NB: 

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets), 
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.





More information about the radiator mailing list