I'm having a problem with my freeradius, and i can't figure out what is going on.
I'm using freeradius version 0.9.0-1 .
Our RAS is a CISCO 2610 with IOS (tm) C2600 Software (C2600-I-M), Version 12.2(5d), RELEASE SOFTWARE (fc1)
Our structure is like this : RAS and primary Radius server are on the same network.
the secondary radius server is held on a different network.
During the client connection, when the RAS sends its radius request to the secondary radius server, there is no problem, it works perfectly.
But if the RAS asks the primary radius server to validate user's connection. The radius replies as if the login was uncorrect.
This problem appeares just after that i have changed the IP address of the RAS. When I tcpdumped traffics about this connection I have something like this :
17:42:29.377979 62.173.232.2.1645 > 62.173.232.1.1812: rad-access-req 76 [id 225] Attr[ NAS_ipaddr{216.252.248.193} NAS_port{39} NAS_port_type{Async} User{heryzo} [|radius]
17:42:34.377800 62.173.232.2.1645 > 62.173.232.1.1812: rad-access-req 76 [id 225] Attr[ NAS_ipaddr{216.252.248.193} NAS_port{39} NAS_port_type{Async} User{heryzo} [|radius]
17:42:34.378113 62.173.232.1.1812 > 62.173.232.2.1645: rad-access-reject 20 [id 225] (DF)
The NAS_ipaddr was the IP address of the RAS before the change happened. and 62.173.232.2 is its IP address now. I don't understand why am-i still have this inside the radius paquets request sent by the CISCO?
I would like to know if the problem is related to this NAS_ipaddr? If so, then the primary radius server treats the radius request in a different way than the secondary radius server so how can I configure it to treat packet in the same way tahn the secondary server?
Does any one can guess what is happening to me?
Your help will be very appreciated
Regards
-- NANTENAINA TIANARIVO U.H. System Administrator Simicro Internet - Madagascar T�l : 261 20 22 648 83
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
