Dear Iliya, Thanks for your valuable suggestion. Rlm_wimax module was not building. I enabled and now it is building. As per your suggestion, I have added "wimax" in file raddb/sites-enabled/default Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me in this?
Thanks ! Rathod. -----Original Message----- From: Iliya Peregoudov [mailto:iperegu...@cboss.ru] Sent: Thursday, March 15, 2012 11:41 AM To: rat...@tataelxsi.co.in; FreeRadius users mailing list Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server: # raddb/sites-enabled/default post-auth { ... wimax ... } This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and MS-MPPE-Recv-Key. Rathod Subhashchandra wrote: > Dear All, > > > > I am trying to setup EAP-TLS authentication mechanism for my WiMAX > testing and following are the details. > > > > 1. TATA ELXSI - WIMAX MS > > 2. TATA ELXSI - WIMAX BS > > 3. ARICENT ASN-GW version 4.2 > > 4. Free Radius AAA server version 2.1.3 > > > > Certificates exchange is through. When AAA server responds with > Access-Accept, ASN-GW throws error saying "Validation of the Attributes > in the Received packet failed" > > > > Wireshark logs @ ASN-GW > > > > > > I could not attach wireshark pcap logs due to size constraint. I have > took print screen of only ACCESS-ACCEPT message copied to MS word. > > > > What are the mandatory fields in Access-Accept and their valid values? > > Service-Type attribute value is 2. ASN-GW is adding this attribute. Is > this valid for EAP-TLS? > > I am guessing this should be 8. I don't have control over ASN-GW > parameters modification. > > > > Please let me know what fields are invalid in above ACCESS-ACCEPT. > > > > Thanks ! > > Rathod. > > > > > ------------------------------------------------------------------------ > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html