Forgot to drop line here too that in AOS-CX it seems that Calling-Station-Id need to be formatted as "aa-bb-cc-dd-ee-ff" and User-Name as "aa:bb:cc:dd:ee:ff" plus also fullfill other requirements from https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-7885/Content/Chp_Sppt_RADIUS_att/rad-att-dyn-aut-fl-10.htm
Calling-Station-Id = 00-0F-58-09-E5-99 " NAS-Port = 129 " User-Name = 00:0f:58:09:e5:99 " NAS-IP-Address = 172.21.21.25 " NAS-Port-Id = 3/1/1", -jori luoto- ________________________________ Lähettäjä: Zammit, Ludovic Lähetetty: Maanantai 3. kesäkuuta 2024 18.41 Vastaanottaja: packetfence-users@lists.sourceforge.net Kopio: Jori Luoto Aihe: Re: [PacketFence-users] Node reevaluation fails with radius message. Hello Jori, Because the switch does not like the attributes that is sent. It could just be because of the Mac address format or the accounting id. Are you sending Radius accounting toward pf from the switch ? Thanks, Ludovic Zammit Product Support Engineer Principal Lead [https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png] Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: [https://www.akamai.com/us/en/multimedia/images/custom/community.jpg] <https://community.akamai.com> [https://www.akamai.com/us/en/multimedia/images/custom/rss.png] <http://blogs.akamai.com> [https://www.akamai.com/us/en/multimedia/images/custom/twitter.png] <https://twitter.com/akamai> [https://www.akamai.com/us/en/multimedia/images/custom/fb.png] <http://www.facebook.com/AkamaiTechnologies> [https://www.akamai.com/us/en/multimedia/images/custom/in.png] <http://www.linkedin.com/company/akamai-technologies> [https://www.akamai.com/us/en/multimedia/images/custom/youtube.png] <http://www.youtube.com/user/akamaitechnologies?feature=results_main> On May 28, 2024, at 3:10 AM, Jori Luoto via PacketFence-users <packetfence-users@lists.sourceforge.net> wrote: Hello, What could be wrong here when I see message below in Auditing->Radius Audit Logs -> Disconnect NAK?? RADIUS Request Acct-Session-Id = " User-Name = xx-yy-zz-xx-yy-zz " NAS-IP-Address = <right-ip-address-to-nas> " Calling-Station-Id = xx-yy-zz-xx-yy-zz", RADIUS Reply Error-Cause = Invalid-Attribute-Value " Code = Disconnect-NAK Switch is Aruba 6300 running on AOS-CX 10.13.1015 and basic Mac authorization works fine. When I try to use re-evaluation in node system is not working as expected. Terveisin -jori luoto- _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!VeGrtXOXC6-RGPVfxNgPZOfiyYi5LrAJbd4ahSs87a8AZ9kziuYmCYKnn8RnP2t94VB9uPWksf9VGDfdzQoBm86ED9TiL0Bl1Ls4vw$
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
