[RADIATOR] [IPv6] Issues with Framed-Interface-Id assignment

[Heikki Vatiainen]

On 09/22/2011 10:05 AM, Elias wrote:

Hello Elias,

> The patch works and I can successfully assign the v6 addresses correctly
> now. However, it'll not work if I try to return a simplified IP address,
> eg: 10:1:1:1.

You are correct, it currently accepts this format only:
'aaaa:bbbb:cccc:dddd'

Also, just to be sure, you mentioned "simplified IP address". The
characters should be hex characters. So you can not do something like
::10.1.1.1 either.

> Thu Sep 22 15:20:01 2011: DEBUG: Packet dump:
> *** Received from 10.55.254.100 port 51207 ....
> Code:       Access-Request
> Identifier: 76
> Authentic:  <127>v<195>J}<2<29><143><8><163>Yv<16>=<143>
> Attributes:
>         User-Name = "dual_stack03 at v6"
>         Service-Type = Framed-User
>         NAS-IP-Address = 203.63.154.1
>         NAS-Identifier = "203.63.154.1"
>         NAS-Port = 1234
>         Called-Station-Id = "123456789"
>         Calling-Station-Id = "987654321"
>         NAS-Port-Type = Async
>         User-Password =
> <252><166><201>od<23><190>,<224><29><235><222><217><199><165><236>
> 
> Thu Sep 22 15:20:01 2011: DEBUG: Handling request with Handler 'Realm =
> /v6/i', Identifier ''
> Thu Sep 22 15:20:01 2011: DEBUG: LimitLabConnection Deleting session for
> dual_stack03 at v6, 203.63.154.1, 1234
> Thu Sep 22 15:20:01 2011: DEBUG: Handling with Radius::AuthFILE:
> Thu Sep 22 15:20:01 2011: DEBUG: Reading users file
> /usr/local/etc/radius/users.conf
> Thu Sep 22 15:20:01 2011: DEBUG: Radius::AuthFILE looks for match with
> dual_stack03 at v6 [dual_stack03 at v6]
> Thu Sep 22 15:20:01 2011: DEBUG: Radius::AuthFILE ACCEPT: :
> dual_stack03 at v6 [dual_stack03 at v6]
> Thu Sep 22 15:20:01 2011: DEBUG: AuthBy FILE result: ACCEPT,
> Thu Sep 22 15:20:01 2011: DEBUG: Access accepted for dual_stack03 at v6
> *Thu Sep 22 15:20:01 2011: WARNING: Failed to parse ifid: 10:1:1:1*
> Thu Sep 22 15:20:01 2011: DEBUG: Packet dump:
> *** Sending to 10.55.254.100 port 51207 ....
> Code:       Access-Accept
> Identifier: 76
> Authentic:  <<5><250><197><157><201>r<150><130>Pp<158><234><193>4Y
> Attributes:
>         Framed-IP-Address = 255.255.255.254
>         Service-Type = Framed-User
>         Framed-Protocol = PPP
>         Framed-IP-Netmask = 255.255.255.255
>         Framed-Interface-Id = 10:1:1:1
> 
> On 09/21/2011 08:37 PM, Elias wrote:
>> That's excellent news! Will test it out and tell you how it works.
>>
>> On 09/21/2011 04:41 PM, Heikki Vatiainen wrote:
>>> On 08/25/2011 01:00 PM, Eddie Stassen wrote:
>>>
>>> Hello Eddie and Elias,
>>>
>>>>> What I'm looking for is ideas or more information what the itf ids may
>>>>> look like. This would be needed to correctly pack the attribute when it
>>>>> is sent to the wire.
>>>>>
>>>> The only ones I have seen use the un-abbreviated form i.e.
>>>> %x:%x:%x:%x, but then my IPv6 experience is very limited.
>>> The latest patch set for Radiator 4.8 now supports IPv6 interface id:
>>>
>>> 2011-09-19 dictionary Radius.pm
>>>      Changed the type of Framed-Interface-Id in dictionary to be ifid.
>>>      You can now specify Framed-Interface-Id as strings in the format
>>>      'aaaa:bbbb:cccc:dddd', which is compatible with FreeRadius.
>>>
>>> If you can test this, please let us know how it works.
>>>
>>> Thanks!
>>>
>> _______________________________________________
>> radiator mailing list
>> radiator at open.com.au
>> http://www.open.com.au/mailman/listinfo/radiator
>>
>> ----------------------------------------------------------------------
>> This message has been scanned by TM antivirus for viruses and spyware and found to be clean.
>>


-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.