There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server:

# raddb/sites-enabled/default
post-auth {
   ...
   wimax
   ...
}

This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and MS-MPPE-Recv-Key.


Rathod Subhashchandra wrote:
Dear All,

I am trying to setup EAP-TLS authentication mechanism for my WiMAX testing and following are the details.

1.  TATA ELXSI - WIMAX MS

2.  TATA ELXSI - WIMAX BS

3.  ARICENT ASN-GW version 4.2

4.  Free Radius AAA server version 2.1.3

Certificates exchange is through. When AAA server responds with Access-Accept, ASN-GW throws error saying "Validation of the Attributes in the Received packet failed"

Wireshark logs @ ASN-GW

I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACCESS-ACCEPT message copied to MS word.

What are the mandatory fields in Access-Accept and their valid values?

Service-Type attribute value is 2. ASN-GW is adding this attribute. Is this valid for EAP-TLS?

I am guessing this should be 8. I don’t have control over ASN-GW parameters modification.

Please let me know what fields are invalid in above ACCESS-ACCEPT.

Thanks !

Rathod.


------------------------------------------------------------------------

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to