Hello Eli -
On Thursday 05 April 2001 10:56, Eli Klein wrote:
> I'm assuming this is an NT 4.0 problem, but maybe someone's seen this
> before.
>
> The host connects (via dialup) and gets the correct IP address, but the
> netmask is always set to 255.0.0.0, no matter what. The NT box cannot get
> out at all (tcp/icmp/etc).
>
I suspect this is a NAS issue, as your accounting start record shows this:
> Tunnel-Client-Endpoint = "10.227.12.2"
The netmask of 255.0.0.0 is consistent with this address (with class-full
routing).
However there are no IP addresses shown, in spite of you sending this:
> Framed-IP-Address = 192.168.139.31
> Framed-IP-Netmask = 255.255.255.255
I don't know what is supposed to be happening, but you will have to check the
NAS and/or your provider.
hth
Hugh
> Here's a level 4 trace:
>
> Wed Apr 4 16:00:01 2001: INFO: Server started: Radiator 2.18 on radius1
> Wed Apr 4 16:00:36 2001: DEBUG: Packet dump:
> *** Received from 192.168.143.2 port 1645 ....
> Code: Access-Request
> Identifier: 23
> Authentic: <186>cN<148><204>+<132>BmW<167><246>SZ<2><169>
> Attributes:
> NAS-IP-Address = 192.168.143.2
> NAS-Port = 5
> NAS-Port-Type = Async
> User-Name = "telesis"
> Called-Station-Id = "3032359063"
> Calling-Station-Id = "3039309813"
> User-Password =
> "i4<209>F<26><200><135><144><170><154><130>F<234><198>i<28>"
> Service-Type = Framed-User
> Framed-Protocol = PPP
>
> Wed Apr 4 16:00:36 2001: DEBUG: Handling request with Handler
> 'Realm=denveronline.net'
> Wed Apr 4 16:00:36 2001: DEBUG: Deleting session for telesis,
> 192.168.143.2, 5
> Wed Apr 4 16:00:36 2001: DEBUG: Handling with Radius::AuthFILE
> Wed Apr 4 16:00:36 2001: DEBUG: Radius::AuthFILE looks for match with
> [EMAIL PROTECTED]
> Wed Apr 4 16:00:36 2001: DEBUG: Radius::AuthFILE ACCEPT:
> Wed Apr 4 16:00:36 2001: DEBUG: Access accepted for
> [EMAIL PROTECTED]
> Wed Apr 4 16:00:36 2001: DEBUG: Packet dump:
> *** Sending to 192.168.143.2 port 1645 ....
> Code: Access-Accept
> Identifier: 23
> Authentic: <186>cN<148><204>+<132>BmW<167><246>SZ<2><169>
> Attributes:
> Framed-IP-Address = 192.168.139.31
> Service-Type = Framed-User
> Framed-Protocol = PPP
> Framed-IP-Netmask = 255.255.255.255
> Framed-Routing = None
> Framed-MTU = 1500
> Framed-Compression = Van-Jacobson-TCP-IP
>
> Wed Apr 4 16:00:36 2001: ERR: Attribute number 90 (vendor ) is not
> defined in your dictionary
> Wed Apr 4 16:00:36 2001: ERR: Attribute number 91 (vendor ) is not
> defined in your dictionary
> Wed Apr 4 16:00:36 2001: DEBUG: Packet dump:
> *** Received from 192.168.143.2 port 1646 ....
> Code: Accounting-Request
> Identifier: 24
> Authentic: <230><207><O<14><246><224>T<197><207><2><198><30><8><9>w
> Attributes:
> NAS-IP-Address = 192.168.143.2
> NAS-Port = 5
> NAS-Port-Type = Async
> User-Name = "telesis"
> Called-Station-Id = "3032359063"
> Calling-Station-Id = "3039309813"
> Acct-Status-Type = Start
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> Acct-Session-Id = "00000083"
> Framed-Protocol = PPP
> Tunnel-Client-Endpoint = "10.227.12.2"
> Tunnel-ID = "12941"
> Acct-Delay-Time = 0
>
> Wed Apr 4 16:00:36 2001: DEBUG: Handling request with Handler
> 'Realm=denveronline.net'
> Wed Apr 4 16:00:36 2001: DEBUG: Adding session for telesis,
> 192.168.143.2,
> 5
> Wed Apr 4 16:00:36 2001: DEBUG: Handling with Radius::AuthFILE
> Wed Apr 4 16:00:36 2001: DEBUG: Accounting accepted
> Wed Apr 4 16:00:36 2001: DEBUG: Packet dump:
> *** Sending to 192.168.143.2 port 1646 ....
> Code: Accounting-Response
> Identifier: 24
> Authentic: <230><207><O<14><246><224>T<197><207><2><198><30><8><9>w
> Attributes:
>
> Wed Apr 4 16:01:04 2001: ERR: Attribute number 90 (vendor ) is not
> defined in your dictionary
> Wed Apr 4 16:01:04 2001: ERR: Attribute number 91 (vendor ) is not
> defined in your dictionary
> Wed Apr 4 16:01:04 2001: DEBUG: Packet dump:
> *** Received from 192.168.143.2 port 1646 ....
> Code: Accounting-Request
> Identifier: 25
> Authentic:
> <207><189><250><152><212><197><18>b8<243><159><190><5><156><212>[
> Attributes:
> NAS-IP-Address = 192.168.143.2
> NAS-Port = 5
> NAS-Port-Type = Async
> User-Name = "telesis"
> Called-Station-Id = "3032359063"
> Calling-Station-Id = "3039309813"
> Acct-Status-Type = Stop
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> Acct-Session-Id = "00000083"
> Framed-Protocol = PPP
> Tunnel-Client-Endpoint = "10.227.12.2"
> Tunnel-ID = "12941"
> Framed-IP-Address = 192.168.139.31
> Acct-Terminate-Cause = Host-Request
> Acct-Input-Octets = 394
> Acct-Output-Octets = 441
> Acct-Input-Packets = 24
> Acct-Output-Packets = 26
> Acct-Session-Time = 27
> Acct-Delay-Time = 0
>
> Wed Apr 4 16:01:04 2001: DEBUG: Handling request with Handler
> 'Realm=denveronline.net'
> Wed Apr 4 16:01:04 2001: DEBUG: Deleting session for telesis,
> 192.168.143.2, 5
> Wed Apr 4 16:01:04 2001: DEBUG: Handling with Radius::AuthFILE
> Wed Apr 4 16:01:04 2001: DEBUG: Accounting accepted
>
>
> Any help is greatly appreciated..
>
> Thanks!
>
> -Eli
> [EMAIL PROTECTED]
>
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
