Thanks Alan. >ichiro tanaka wrote: >> My freeradius proxy already includes "dictionary.rfc4818". >> Do I need something? > > No idea. Maybe the attribute isn't in the correct format.
I see. Auth-server is freeradius-2.1.10. I captuared radius packet by wireshark, and compared to rfc4818(sec.3) format. "Delegated-IPv6-Prefix" attribute that auth-server replied and reply_log looks correct. http://tools.ietf.org/html/rfc4818 Proxy-Server recognition was repaired, if proxy-server did not include "dictionary.ascend". --- auth-server [[ users ]] --- u...@example.jp Cleartext-Password := password Delegated-IPv6-Prefix := 1234:5678:90ab:cdef::/64 --- auth-server [[ radiusd -X ]] --- Sending Access-Accept of id 250 to 10.233.36.101 port 11814 Delegated-IPv6-Prefix := 1234:5678:90ab:cdef::/64 Proxy-State = 0x34 Thu Oct 21 19:00:08 2010 : Info: Finished request 0. --- auth-server [[ reply_log ]] --- Wed Oct 20 16:56:18 2010 Packet-Type = Access-Accept Delegated-IPv6-Prefix := 1234:5678:90ab:cdef::/64 --- proxy-server [[ radiusd -X ]] --- rad_recv: Access-Accept packet from host 10.233.36.100 port 1812, id=76, length= 44 Attr-123 = 0x00401234567890abcdef0000000000000000 Proxy-State = 0x3135 --- proxy-server [[ post_proxy_log ]] --- Fri Oct 22 11:07:20 2010 Packet-Type = Access-Accept Attr-123 = 0x00401234567890abcdef0000000000000000 Proxy-State = 0x37 --- proxy-server [[ not inlucde "dictionary.ascend" radiusd -X ]] --- rad_recv: Access-Accept packet from host 10.233.36.100 port 1812, id=118, length =44 Delegated-IPv6-Prefix = 1234:5678:90ab:cdef::/64 Proxy-State = 0x3134 --- proxy-server [[ not inlucde "dictionary.ascend" post_proxy_log ]] --- Fri Oct 22 11:26:41 2010 Packet-Type = Access-Accept Delegated-IPv6-Prefix = 1234:5678:90ab:cdef::/64 Proxy-State = 0x3133 ichiro tanaka - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html