Hello,
I am am needing some help and I hope that I can find some help here.
What I am trying to accomplish is this. My company bought a filtering
solution that using IPIP tunneling and I am having problems getting it to
work with a Portmaster 3. What I am trying to do is eliminate the
different parts in this solution. It is authorizing fine but there is no
tunnel to the filter box and I am courious to find out if I radiator setup
correctly.
Here is the logfile from radiator from when the user logged in:
Tue Oct 31 11:40:20 2000: DEBUG: Packet dump:
*** Received from 209.142.178.4 port 1026 ....
Code: Access-Request
Identifier: 12
Authentic: L}<1><231><254><242><207><155><153><186><219><192><133><196>-<242>
Attributes:
User-Name = "xstoptst"
LE-Terminate-Detail =
"<15><217>6<133><207>YC_<145><242><3>B<240><11><216><129>"
LE-Connect-Detail = "<209><142><178><4>"
LE-SA-Id = "<0><0><0><1>"
NAS-Port-Type = Async
Service-Type = Framed-User
Framed-Protocol = PPP
Connect-Info = "26400 LAPM/V42BIS"
Called-Station-Id = "8071501"
Calling-Station-Id = "3183245445"
Tue Oct 31 11:40:20 2000: DEBUG: Handling request with Handler 'Realm='
Tue Oct 31 11:40:20 2000: DEBUG: Deleting session for xstoptst, ю�,
Tue Oct 31 11:40:20 2000: DEBUG: Handling with Radius::AuthFILE
Tue Oct 31 11:40:20 2000: DEBUG: Reading users file /etc/raddb/users
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE looks for match with xstoptst
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT
Tue Oct 31 11:40:20 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX REJECT: Check item
NAS-IP-Address expression '209.142.130.4' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE REJECT: Check item
NAS-IP-Address expression '209.142.130.4' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT1
Tue Oct 31 11:40:20 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX REJECT: Check item
NAS-IP-Address expression '209.142.128.4' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE REJECT: Check item
NAS-IP-Address expression '209.142.128.4' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT2
Tue Oct 31 11:40:20 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX REJECT: Check item
NAS-IP-Address expression '209.206.160.5' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE REJECT: Check item
NAS-IP-Address expression '209.206.160.5' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT3
Tue Oct 31 11:40:20 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX REJECT: Check item
NAS-IP-Address expression '209.206.184.2' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE REJECT: Check item
NAS-IP-Address expression '209.206.184.2' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT4
Tue Oct 31 11:40:20 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthUNIX REJECT: Check item
NAS-IP-Address expression '207.230.192.6' does not match '' in request
Tue Oct 31 11:40:20 2000: DEBUG: Radius::AuthFILE REJECT: Check item
NAS-IP-Address expression '207.230.192.6' does not match '' in request
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT5
Tue Oct 31 11:40:21 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX REJECT: Check item
NAS-IP-Address expression '209.142.152.4' does not match '' in request
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE REJECT: Check item
NAS-IP-Address expression '209.142.152.4' does not match '' in request
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT6
Tue Oct 31 11:40:21 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX REJECT: User xstoptst is
not in Group bess
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE REJECT: User xstoptst is
not in Group bess
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT7
Tue Oct 31 11:40:21 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX REJECT: User xstoptst is
not in Group trial
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE REJECT: User xstoptst is
not in Group trial
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE looks for match with DEFAULT8
Tue Oct 31 11:40:21 2000: DEBUG: Handling with Radius::AuthUNIX
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX looks for match with xstoptst
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthUNIX ACCEPT:
Tue Oct 31 11:40:21 2000: DEBUG: Radius::AuthFILE ACCEPT:
Tue Oct 31 11:40:21 2000: DEBUG: Access accepted for xstoptst
Tue Oct 31 11:40:21 2000: DEBUG: Packet dump:
*** Sending to 209.142.178.4 port 1026 ....
Code: Access-Accept
Identifier: 12
Authentic: L}<1><231><254><242><207><155><153><186><219><192><133><196>-<242>
Attributes:
Framed-IP-Address = 255.255.255.254
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Netmask = 255.255.255.255
Reply-Message = "choice: "
Port-Limit = 1
Idle-Timeout = 1200
Session-Timeout = 28800
Filter-Id = "xstop.sec"
LE-IPSec-Outsource-Profile = "xstop"
Tue Oct 31 11:40:22 2000: DEBUG: Packet dump:
*** Received from 209.142.178.4 port 1026 ....
Code: Accounting-Request
Identifier: 13
Authentic: <134><254><20>U3<142><17>Y<17><8><246><153><161>kt*
Attributes:
Acct-Session-Id = "33000006"
User-Name = "xstoptst"
LE-Connect-Detail = "<209><142><178><4>"
LE-SA-Id = "<0><0><0><1>"
NAS-Port-Type = Async
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Connect-Info = "26400 LAPM/V42BIS"
Called-Station-Id = "8071501"
Calling-Station-Id = "3183245445"
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 209.142.141.202
Acct-Delay-Time = 0
Tue Oct 31 11:40:22 2000: DEBUG: Handling request with Handler 'Realm='
Tue Oct 31 11:40:22 2000: DEBUG: Adding session for xstoptst, ю�,
Tue Oct 31 11:40:22 2000: DEBUG: Handling with Radius::AuthFILE
Tue Oct 31 11:40:22 2000: DEBUG: Accounting accepted
Tue Oct 31 11:40:22 2000: DEBUG: Packet dump:
*** Sending to 209.142.178.4 port 1026 ....
Code: Accounting-Response
Identifier: 13
Authentic: <134><254><20>U3<142><17>Y<17><8><246><153><161>kt*
Attributes:
If you are needing anymore infomation just let me know.
Thanks for your help,
Keith Olmstead
Network Engineer/Analyst
CenturyTel Internet Services
318.361.4900
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
