Re: Help - ASN-GW throwing error - Validation of attributes failed

[Iliya Peregoudov]

Run freeradius in debug mode (-X). Look for eap module debug messages. Look for wimax module debug messages. Try to understand.

Rathod Subhashchandra wrote:

Dear Iliya,

Thanks for your valuable suggestion.
Rlm_wimax module was not building. I enabled and now it is building.
As per your suggestion, I have added "wimax" in file
raddb/sites-enabled/default
Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me
in this?

Thanks !
Rathod.


-----Original Message-----

From: Iliya Peregoudov [mailto:iperegu...@cboss.ru] Sent: Thursday, March 15, 2012 11:41 AM

To: rat...@tataelxsi.co.in; FreeRadius users mailing list
Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed



# raddb/sites-enabled/default
post-auth {
    ...
    wimax
    ...
}




Rathod Subhashchandra wrote:

There is no WiMAX-MSK attribute in Access-Accept. You need to call rlm_wimax module from post-auth section of default virtual server: This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and MS-MPPE-Recv-Key.

Dear All,




1.  TATA ELXSI - WIMAX MS

2.  TATA ELXSI - WIMAX BS

3.  ARICENT ASN-GW version 4.2

4.  Free Radius AAA server version 2.1.3




Wireshark logs @ ASN-GW




What are the mandatory fields in Access-Accept and their valid values?






Please let me know what fields are invalid in above ACCESS-ACCEPT.


Thanks !

Rathod.



------------------------------------------------------------------------

-
List info/subscribe/unsubscribe? See

I am trying to setup EAP-TLS authentication mechanism for my WiMAX testing and following are the details. Certificates exchange is through. When AAA server responds with Access-Accept, ASN-GW throws error saying "Validation of the Attributes in the Received packet failed" I could not attach wireshark pcap logs due to size constraint. I have took print screen of only ACCESS-ACCEPT message copied to MS word. Service-Type attribute value is 2. ASN-GW is adding this attribute. Is this valid for EAP-TLS? I am guessing this should be 8. I don't have control over ASN-GW parameters modification.

http://www.freeradius.org/list/users.html

smime.p7s
Description: S/MIME Cryptographic Signature

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html