[pfSense Support] Captive Portal, VMWare and Radius

[Luiz Vaz]

Hi All,

   I am using the pfSense on VMWare using the developers image.
   On the same machine i setup another VM with Win98.
   Everything is working good, DHCP, Captive Portal (NoAuth and LocalUserList).

   But, some strange stuff happens when i choose Radius Auth!
   My Radius server is another machine running outside world.
   In the firewall i allowed IN and OUT to UDP 1812, 1813 ports...

   When i try to login thru captive portal in Win98, it´s hanging.
   But calling the radius using NTRadPing inside the same Win98, it works!
   And using a radiusclient inside pfSense works too.

   Only when the php try to retrieve the info from Radius hangs.
   No matter if it use the custom radius code or using the libradius extension.

   My VMWare Net is:
   - Win98:           192.168.65.131
   - pfSense:         192.168.65.130  (LAN)
   - pfSense:         192.168.160.129 (WAN)
   - VMWare NAT:      192.168.160.130
   - VMWare Gateway:  192.168.160.2
  
   Obs.: My Machine is using a DSL router with WinXP for the tests and Dev.
  
     

   A deep look in the calls showed this log in pftop:

   Using NTRadPing:
udp  In  192.168.65.131:1076     200.184.125.*:1812        SINGLE:MULTIPLE    
udp  Out 192.168.65.131:1076     200.184.125.*:1812      MULTIPLE:SINGLE     

Output:
Sending authentication request to server 200.184.125.*:1812
Transmitting packet, code=1 id=6 length=44
Received response from server in 600 miliseconds
Replay packet code=2 id=6 length=30
Response: Accept-Accept



 Captive Portal:
tcp  In  192.168.65.131:1077     192.168.65.130:8000    ESTABLISHED:ESTABLISHED 
udp  Out 192.168.160.129:61371  200.184.125.*:1812        MULTIPLE:SINGLE      
udp  Out 192.168.160.129:64110  200.184.195.*:1812          SINGLE:NO_TRAFFIC  

Output:
   Radius Error: No valid RADIUS responses received.



   My surprise is that the pfSense call to radius and it´s reply (I run Radius in DebugMode).
   But the pfSense don´t receive the response.

   I guess that i missed something on firewall. ;)


   Anyone had some ideia about what's happen?
   Or any tip to find it out?


Best Regards,
Luiz Vaz