Re: [Help-gnu-radius] 3Com Wireless AP7250

[zamri]

1)  FIRST, ACTUALLY I'M NEW TO RADIUS AND MY COMPANY ASKING ME TO 
EVALUATING THE WIRELESS LAN WITH RADIUS AUTHENTICATION, OF COURSE THIS IS A 
FIRST TIME SETUP, THE MANUAL IS VERY TECHNICAL AND LACK OF EXAMPLES, 
ANYWAY I WILL CONTINUE UNTIL SUCCESSFULLY SETUP ALTHOUGH I NEED TO CHANGED THE 
AP (CHANGING THE GNU RADIUS IS NOT POSSIBLE AT THIS TIME). 
SO..I HOPE YOU CAN ADVICE ME WHAT IS WRONG TO THE SETUP (JUST ADVICE ME 
WHERE IS IT STUCKED: AT RADIUS, AP OR MyPC), YOUR ASSISTANCE IS HIGHLY 
APPRECIATED. 

(MyPC Setup:  AUTH ->  8021X  -  EAP Type : MD5)



raddb]# cat users

#Format: LABEL  LHS  RHS
#
#
#----------------------------------------------------------------
BEGIN                   Huntgroup-Name = "AFFINBANK"
                                Fall-Through = Yes
#----------------------------------------------------------------
# (Test1) Plain Text Passwd
zamri                           Auth-Type = Local,
                                User-Password = password,
                                Simultaneous-Use = 1
                                        Service-Type = Login-User
#---------------------------------------------------------------
# (Test2) ENCRYPT Passwd
zamri2                          Auth-Type = Crypt-Local,
                        User-Password = "3IsHW/j5uSYgE",
                                Simultaneous-Use = 1
                                        Service-Type = Login-User
#----------------------------------------------------------------
# (Test3) MyPc MAC Address
0012a94e9707             Auth-Type = Local,
                                        User-Password = 0012a94e9707
                                                Service-Type = Login-User
#----------------------------------------------------------------



1) THIS IS WHAT I GOT WHEN I TEST USERNAME/PASSWORD UNDER REDAUTH UTILITY, THEN 
I ENABLED MY WI-FI  (AP SETTING:   AUTH -> RADIUS MAC)

raddb]# /etc/rc.d/init.d/radius reload
raddb]# Reloading configs
raddb]#
raddb]# radauth zamri password
raddb]# Authentication passed.
raddb]# radauth zamri2 password
raddb]# Authentication passed.

raddb]# tail -f /var/log/radius.log
May 20 09:47:42 Main.info: Reloading configuration now
May 20 09:47:42 Main.info: Terminating the subprocesses
May 20 09:47:42 Main.notice: child 13326 exited with status 0
May 20 09:47:42 Main.info: Loading configuration files.
May 20 09:47:42 Main.info: reading /usr/etc/raddb/config
May 20 09:47:42 Main.info: /usr/etc/raddb/users reloaded.
May 20 09:48:22 Auth.notice: (Access-Request affin01 123 "zamri"): Login 
OK [zamri/password]
May 20 09:48:32 Auth.notice: (Access-Request affin01 124 "zamri2"): Login OK 
[zamri2/password]
May 20 09:51:00 Auth.notice: (Access-Request affin02 2 "0012a94e9707"): 
Login OK [0012a94e9707/0012a94e9707]


raddb]# cat /var/log/radacct/affin01/detail.auth

Fri May 20 09:48:22 2005
        User-Name = zamri
        NAS-IP-Address = 172.17.2.112
        Timestamp = 1116596902
        Request-Authenticator = None

Fri May 20 09:48:32 2005
        User-Name = zamri2
        NAS-IP-Address = 172.17.2.112
        Timestamp = 1116596912
        Request-Authenticator = None



raddb]# cat /var/log/radacct/affin02/detail.auth

Fri May 20 09:51:00 2005
        User-Name = 0012a94e9707
        Timestamp = 1116597060
        Request-Authenticator = None



3) AFTER THAT I CHANGED AP SETTING:   AUTH MAC  -> DISABLED

raddb]# tail -f /var/log/radius.log
May 20 11:21:50 Auth.notice: (Access-Request affin02 3 "zamri" 
CLID=0012a94e9707 CSID=0012a90641a3): Login incorrect [zamri/]
May 20 11:21:55 Auth.notice: (Access-Request affin02 3 "zamri" 
CLID=0012a94e9707 CSID=0012a90641a3): Login incorrect [zamri/]
May 20 11:22:13 Auth.notice: (Access-Request affin02 4 "zamri2" 
CLID=0012a94e9707 CSID=0012a90641a3): Login incorrect [zamri2/]


raddb]# cat /var/log/radacct/affin02/detail.auth

Fri May 20 11:21:55 2005
        User-Name = zamri
        NAS-IP-Address = 130.12.3.20
        NAS-Port-Type = 19
        NAS-Port-Id = 1
        Framed-MTU = 1400
        Calling-Station-Id = 0012a94e9707
        Called-Station-Id = 0012a90641a3
        NAS-Identifier = affin02
        EAP-Message = \002\001\000\012\001zamri
        Message-Authenticator = 
\322\010\342\204\170\173\044\200\254\366\014\165\307\220ah
        Timestamp = 1116602515
        Request-Authenticator = None

Fri May 20 11:22:13 2005
        User-Name = zamri2
        NAS-IP-Address = 130.12.3.20
        NAS-Port-Type = 19
        NAS-Port-Id = 1
        Framed-MTU = 1400
        Calling-Station-Id = 0012a94e9707
        Called-Station-Id = 0012a90641a3
        NAS-Identifier = affin02
        EAP-Message = \002\001\000\013\001zamri2
        Message-Authenticator = 
\320\112\227\026K<è¾^\012\013\330\144\223\010\010
        Timestamp = 1116602533
        Request-Authenticator = None


4) BELOW ARE WHAT 3COM AP7250 SAID;

There are no special settings on the access point to distinguish between 
the various RADIUS policies or authentication types (for example EAP-MD5, 
EAP-TLS, EAP-TTLS). These policies are set up and controlled on the RADIUS 
server.

The access point can send connection parameters to a RADIUS server, as 
well as statistics for accounting purposes. The access point is compatible with 
RFC2866 (the RADIUS Accounting specification).


THANKS....

Zamri Hamzah
Network Operations Support



++++++++++++++++++++++++++++++++
 Affinbank Bhd
"Banking without barriers" 
++++++++++++++++++++++++++++++++


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
**********************************************************************