Hello,
Please Help!
Using latest CVS - Proxy-Radius does not pass the VSA, as below (in users):
DEFAULT Pool-Name := test
X-Ascend-Client-Primary-DNS = x.x.x.x,
X-Ascend-Client-Assign-DNS = 1,
ERX-Virtual-Router-Name = "default",
Framed-Routing == None,
Framed-Protocol = PPP,
Service-Type = Framed-User
note: those vsa works correctly when I try with local users (no proxy):
In attrs file:
realm
Service-Type == Framed-User,
Framed-Protocol == PPP,
X-Ascend-Client-Primary-DNS == x.x.x.x,
X-Ascend-Client-Assign-DNS == 1,
ERX-Virtual-Router-Name == "default",
Idle-Timeout <= 600,
Session-Timeout <= 28800
Output:
rad_recv: Access-Request packet from host x.x.x.x port 50000, id=55, length=251
User-Password = "xxx"
User-Name = "[EMAIL PROTECTED]"
Acct-Session-Id = "erx atm 3/2.42:100.221:0009437817"
Service-Type = Framed-User
Framed-Protocol = PPP
ERX-Pppoe-Description = "pppoe 12:34:56:78:9a:bc"
Calling-Station-Id = "#BRAS-01#this is a description#100#221"
Connect-Info = "speed:UBR:12000"
NAS-Port-Type = xDSL
NAS-Port = 845414621
NAS-Port-Id = "atm 3/2.42:100.221"
NAS-IP-Address = x.x.x.x
NAS-Identifier = "BRAS-01"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
rlm_realm: Looking up realm "realm" for User-Name = "xxx"
rlm_realm: Found realm "realm"
rlm_realm: Adding Stripped-User-Name = "xxx"
rlm_realm: Proxying request from user xxx to realm realm
rlm_realm: Adding Realm = "realm"
rlm_realm: Preparing to proxy authentication request to realm "realm"
rlm_eap: No EAP-Message, not doing EAP
users: Matched entry DEFAULT at line 194
modcall: group authorize returns noop for request 0
Sending Access-Request of id 155 to x.x.x.x port 1645
User-Password = "xxx"
User-Name = "xxx"
Acct-Session-Id = "erx atm 3/2.42:100.221:0009437817"
Service-Type = Framed-User
Framed-Protocol = PPP
ERX-Pppoe-Description = "pppoe 12:34:56:78:9a:bc"
Calling-Station-Id = "#BRAS-01#this is a description#100#221"
Connect-Info = "speed:UBR:12000"
NAS-Port-Type = xDSL
NAS-Port = 845414621
NAS-Port-Id = "atm 3/2.42:100.221"
NAS-IP-Address = x.x.x.x
NAS-Identifier = "BRAS-01"
Proxy-State = 0x3535
--- Walking the entire request list ---
Waking up in 1 seconds...
rad_recv: Access-Accept packet from host x.x.x.x port 1645, id=155, length=60
Framed-IP-Address = 255.255.255.254
Framed-IP-Netmask = 255.255.255.255
Framed-MTU = 576
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-Compression = Van-Jacobson-TCP-IP
Proxy-State = 0x3535
Processing the post-proxy section of radiusd.conf
modcall: entering group post-proxy for request 0
attr_filter: Matched entry realm at line 52
modcall: group post-proxy returns noop for request 0
authorize: Skipping authorize in post-proxy stage
rad_check_password: Found Auth-Type
rad_check_password: Auth-Type = Accept, accepting the user
Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 0
radius_xlat: 'x.x.x.x 845414621'
rlm_ippool: MD5 on 'key' directive maps to: 6e4d4f13b0396f83e15609738a3bc036
rlm_ippool: Searching for an entry for key: '6e4d4f13b0396f83e15609738a3bc036'
rlm_ippool: Allocating ip to key: '6e4d4f13b0396f83e15609738a3bc036'
rlm_ippool: num: 1
rlm_ippool: Allocated ip x.x.x.x to client key: 6e4d4f13b0396f83e15609738a3bc036
modcall: group post-auth returns ok for request 0
Sending Access-Accept of id 55 to x.x.x.x port 50000
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = x.x.x.x
Framed-IP-Netmask = 255.255.255.255
Finished request 0
Going to the next request
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 55 with timestamp 450b0ba9
Nothing to do. Sleeping until we see a request.
As you can see, The VSA was not included in the Access-Accept response.
Please HELP!
THANKS!
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
