RE: L2tp and fixed Framed IP Address for ADSL customers
Hello All Just to let you know that i finally find the solution to setup a fixed IP into an l2tp tunnel for my DSL subscribers I needed to tell Radius to send the fixed Framed IP address in the access-req packet by adding the following to my cisco config: radius-server attribute 8 include-in-access-req Hope this will help someone who will face the same problem -- |-Adil Bikarbass |-IT Manager, MTDS |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Fraser Sent: mardi 28 mars 2006 20:10 To: freeradius-users@lists.freeradius.org Subject: Re: L2tp and fixed Framed IP Address for ADSL customers On Tue, 2006-28-03 at 12:05 -0500, Alan DeKok wrote: Adil Bikarbass [EMAIL PROTECTED] wrote: My radius is listening on 1645 for auth and 1646 for acct, I can see the auth request coming into my radius box but the IP address is never got from the Framed-IP reply item but assigned from the Cisco pool Any clue about what could be the problem? The NAS. Fight with it some more. I don't think there's anything you can do to FreeRADIUS to fix it. Is the IP address in a valid range configured on the NAS? A Cisco will not assign an IP address that it is not configured to handle. It seems to me we used eigrp to handle the static ip address networks for our NAS servers. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
L2tp and fixed Framed IP Address for ADSL customers
Hello All Just to let you know that i finally find the solution to setup a fixed IP into an l2tp tunnel for my DSL subscribers I needed to tell Radius to send the fixed Framed IP address in the access-req packet by adding the following to my cisco config: radius-server attribute 8 include-in-access-req Hope this will help someone who will face the same problem -- |-Adil Bikarbass |-IT Manager, MTDS |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Fraser Sent: mardi 28 mars 2006 20:10 To: freeradius-users@lists.freeradius.org Subject: Re: L2tp and fixed Framed IP Address for ADSL customers On Tue, 2006-28-03 at 12:05 -0500, Alan DeKok wrote: Adil Bikarbass [EMAIL PROTECTED] wrote: My radius is listening on 1645 for auth and 1646 for acct, I can see the auth request coming into my radius box but the IP address is never got from the Framed-IP reply item but assigned from the Cisco pool Any clue about what could be the problem? The NAS. Fight with it some more. I don't think there's anything you can do to FreeRADIUS to fix it. Is the IP address in a valid range configured on the NAS? A Cisco will not assign an IP address that it is not configured to handle. It seems to me we used eigrp to handle the static ip address networks for our NAS servers. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: L2tp and fixed Framed IP Address for ADSL customers
The static IP range is a statically routed subnet to the Cisco NAS We are not using Eigrp we use static routing Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Fraser Sent: mardi 28 mars 2006 20:10 To: freeradius-users@lists.freeradius.org Subject: Re: L2tp and fixed Framed IP Address for ADSL customers On Tue, 2006-28-03 at 12:05 -0500, Alan DeKok wrote: Adil Bikarbass [EMAIL PROTECTED] wrote: My radius is listening on 1645 for auth and 1646 for acct, I can see the auth request coming into my radius box but the IP address is never got from the Framed-IP reply item but assigned from the Cisco pool Any clue about what could be the problem? The NAS. Fight with it some more. I don't think there's anything you can do to FreeRADIUS to fix it. Is the IP address in a valid range configured on the NAS? A Cisco will not assign an IP address that it is not configured to handle. It seems to me we used eigrp to handle the static ip address networks for our NAS servers. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: L2tp and fixed Framed IP Address for ADSL customers
Hello All, My Cisco NAS is listening to responses from FreeRadius here is my Cisco config aaa new-model ! ! aaa authentication login default local aaa authentication ppp default group radius aaa authorization network default group radius aaa accounting delay-start aaa accounting exec default start-stop group radius aaa accounting network default start-stop group radius ! vpdn enable vpdn search-order domain vpdn domain-delimiter @ suffix ! vpdn-group l2tp accept-dialin protocol l2tp virtual-template 1 terminate-from hostname BAS local name rabatgw lcp renegotiation on-mismatch l2tp tunnel password 7 04561F021C ! username [EMAIL PROTECTED] password 7 060A5D355C ! interface Loopback0 ip address 192.168.1.1 255.255.255.224 ! ! interface Virtual-Template1 ip unnumbered Loopback0 ip tcp header-compression peer default ip address pool AS keepalive 10 255 ppp authentication pap chap ppp timeout idle 1 ! ip local pool AS 192.168.1.2 192.168.1.10 ! radius-server host x.x.x.x auth-port 1645 acct-port 1646 key 7 141A060F1F0 12939213C38303B4351 My radius is listening on 1645 for auth and 1646 for acct, I can see the auth request coming into my radius box but the IP address is never got from the Framed-IP reply item but assigned from the Cisco pool Any clue about what could be the problem? Thanks -- |-Adil Bikarbass |-IT Manager, MTDS |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: lundi 20 mars 2006 16:26 To: [EMAIL PROTECTED]; FreeRadius users mailing list Subject: Re: L2tp and fixed Framed IP Address for ADSL customers Adil Bikarbass [EMAIL PROTECTED] wrote: I'm using a Cisco 3845. The ADSL users are connecting just fine over the L2tp tunnel the issue is that they're getting dynamically assigned address from the Cisco IP pool even if a fixed IP is set on FreeRadius attributes Then fix the NAS. Read the Cisco documentation to see how to configure it to listen to the response from FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: L2tp and fixed Framed IP Address for ADSL customers
Thanks stefan But this is just a test password running on a private test platform Thanks for the hint anyway -- |-Adil Bikarbass |-IT Manager, MTDS |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco -Original Message- From: Stefan Winter [mailto:[EMAIL PROTECTED] Sent: mardi 28 mars 2006 11:50 To: [EMAIL PROTECTED]; FreeRadius users mailing list Subject: Re: L2tp and fixed Framed IP Address for ADSL customers Hi there! You *REALLY* *SHOULDN'T* post 7-style passwords from Cisco on a public mailing list: http://www.alcrypto.co.uk/cisco/ Just enter your crypto stings into the box near the bottom and press enter. l2tp tunnel password 7 04561F021C Good passwords are longer and include numbers, capitals and special characters. username [EMAIL PROTECTED] password 7 060A5D355C Dito. Now that you've told the world your passwords, maybe you should change them. Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: [EMAIL PROTECTED] Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
L2tp and fixed Framed IP Address for ADSL customers
Title: L2tp and fixed Framed IP Address for ADSL customers Hello All, Ive just setup an L2tp tunnel with my ADSL service provider and would like to have some of my ADSL subscribers get a fixed IP address instead of the dynamically assigned IP Pool Im using a Cisco 3845. The ADSL users are connecting just fine over the L2tp tunnel the issue is that theyre getting dynamically assigned address from the Cisco IP pool even if a fixed IP is set on FreeRadius attributes Do you have any idea on how make this subscribers get the Radius Fixed IP instead of the dynamic one? Thanks In Advance -- |-Adil Bikarbass |-IT Manager, MTDS |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius 0.9.3 user's password length
Dear List, we are actually running a FreeRadius 0.9.3 version on Linux Redhat 8 for our Dialup customers and we would like to know what is the maximum password length a user can have? Please advise Best Regards -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Blank username/password
Dear all, Thanks first of all for making this list available. I'm new to this list, i've searched the mail archive regarding my problem but in vain. I'm running Freeradius 0.9.3 using flat users file. I want to grant access to our dialup users based on the number called (Called-Station-Id) no need for a username or a password. Our users file contains the following DEFAULT entry : DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 What happens is that when a user calls the right phone number and provide a blank username/password he got rejected. But when the user put any character as a username he got connected. How can we have the user either type a blank username or any string as username and get authenticated? Please advise -- |-Adil Bikarbass |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Blank username/password
I've tried this too but with the same result when the username is not empty it's accepted otherwise it's rejeted, The problem is with empty usernames/passwords, once again i want to grant access based on the Called-Station-Id no matter what the username is (empty username). Any tips? Thanks On Wed, 14 Jan 2004, Anson Rinesmith wrote: Our users file contains the following DEFAULT entry : You have DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept Is Closer to what you need in your users file - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Blank username/password
Well i've noticed after reading the debug that the request with the empty username did not even hit the radius server (nothing on the debug output) But when using any character on the username i got some input : - Begining of Input - rad_recv: Accounting-Request packet from host my_NAS:1026, id=252, length=101 Acct-Session-Id = B85D User-Name = t NAS-IP-Address = my_NAS NAS-Port = 45 NAS-Port-Type = ISDN Acct-Status-Type = Start Acct-Authentic = RADIUS Called-Station-Id = 1 Calling-Station-Id = 037680045 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 194.204.200.232 Acct-Delay-Time = 0 modcall: entering group preacct for request 28 rlm_realm: No '/' in User-Name = t, looking up realm NULL rlm_realm: No such realm NULL modcall[preacct]: module ROAM returns noop for request 28 rlm_realm: No '@' in User-Name = t, looking up realm NULL rlm_realm: No such realm NULL modcall[preacct]: module suffix returns noop for request 28 modcall[preacct]: module files returns noop for request 28 modcall[preacct]: module preprocess returns noop for request 28 modcall: group preacct returns noop for request 28 modcall: entering group accounting for request 28 rlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request, unique ID MAY be inconsistent rlm_acct_unique: Hashing ',Client-IP-Address = my_NAS,NAS-IP-Address = my_NAS,Acct-Session-Id = B85D,User-Name = t' rlm_acct_unique: Acct-Unique-Session-ID = 2dd4757bbb6a253d. modcall[accounting]: module acct_unique returns ok for request 28 radius_xlat: '/var/log/radius/radacct/my_NAS/detail' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to /var/log/radius/radacct/my_NAS/detail modcall[accounting]: module detail returns ok for request 28 modcall[accounting]: module unix returns ok for request 28 radius_xlat: '/var/log/radius/radutmp' radius_xlat: 't' modcall[accounting]: module radutmp returns ok for request 28 modcall: group accounting returns ok for request 28 Sending Accounting-Response of id 252 to my_NAS:1026 Finished request 28 Going to the next request Waking up in 6 seconds... -- End Debug My users file contains the following DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 Please advise Adil On Wed, 14 Jan 2004, Anson Rinesmith wrote: With the supplied line in your users file, could you send me your relevant output from radiusd -X, might help debug your problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adil Bikarbass Sent: Wednesday, January 14, 2004 10:36 AM To: [EMAIL PROTECTED] Subject: RE: Blank username/password I've tried this too but with the same result when the username is not empty it's accepted otherwise it's rejeted, The problem is with empty usernames/passwords, once again i want to grant access based on the Called-Station-Id no matter what the username is (empty username). Any tips? Thanks On Wed, 14 Jan 2004, Anson Rinesmith wrote: Our users file contains the following DEFAULT entry : You have DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept Is Closer to what you need in your users file - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Blank username/password
I'm running Lucent Postmaster 3 ComOS version 3.9 which is running just fine I'll double check the config Thanks On Wed, 14 Jan 2004, Dustin Doris wrote: On Wed, 14 Jan 2004, Adil Bikarbass wrote: Well i've noticed after reading the debug that the request with the empty username did not even hit the radius server (nothing on the debug output) But when using any character on the username i got some input : I would say that is a problem on your NAS. - Begining of Input - rad_recv: Accounting-Request packet from host my_NAS:1026, id=252, length=101 Acct-Session-Id = B85D User-Name = t NAS-IP-Address = my_NAS NAS-Port = 45 NAS-Port-Type = ISDN Acct-Status-Type = Start Acct-Authentic = RADIUS Called-Station-Id = 1 Calling-Station-Id = 037680045 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 194.204.200.232 Acct-Delay-Time = 0 modcall: entering group preacct for request 28 rlm_realm: No '/' in User-Name = t, looking up realm NULL rlm_realm: No such realm NULL modcall[preacct]: module ROAM returns noop for request 28 rlm_realm: No '@' in User-Name = t, looking up realm NULL rlm_realm: No such realm NULL modcall[preacct]: module suffix returns noop for request 28 modcall[preacct]: module files returns noop for request 28 modcall[preacct]: module preprocess returns noop for request 28 modcall: group preacct returns noop for request 28 modcall: entering group accounting for request 28 rlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request, unique ID MAY be inconsistent rlm_acct_unique: Hashing ',Client-IP-Address = my_NAS,NAS-IP-Address = my_NAS,Acct-Session-Id = B85D,User-Name = t' rlm_acct_unique: Acct-Unique-Session-ID = 2dd4757bbb6a253d. modcall[accounting]: module acct_unique returns ok for request 28 radius_xlat: '/var/log/radius/radacct/my_NAS/detail' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to /var/log/radius/radacct/my_NAS/detail modcall[accounting]: module detail returns ok for request 28 modcall[accounting]: module unix returns ok for request 28 radius_xlat: '/var/log/radius/radutmp' radius_xlat: 't' modcall[accounting]: module radutmp returns ok for request 28 modcall: group accounting returns ok for request 28 Sending Accounting-Response of id 252 to my_NAS:1026 Finished request 28 Going to the next request Waking up in 6 seconds... -- End Debug My users file contains the following DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 Please advise Adil On Wed, 14 Jan 2004, Anson Rinesmith wrote: With the supplied line in your users file, could you send me your relevant output from radiusd -X, might help debug your problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adil Bikarbass Sent: Wednesday, January 14, 2004 10:36 AM To: [EMAIL PROTECTED] Subject: RE: Blank username/password I've tried this too but with the same result when the username is not empty it's accepted otherwise it's rejeted, The problem is with empty usernames/passwords, once again i want to grant access based on the Called-Station-Id no matter what the username is (empty username). Any tips? Thanks On Wed, 14 Jan 2004, Anson Rinesmith wrote: Our users file contains the following DEFAULT entry : You have DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept Is Closer to what you need in your users file - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Blank username/password
My NAS config seems to be OK Nothing special in it, i specified the radius server and the shared secret So i'm wondering what's wrong and why i'm not getting anything in the logs if there is an empty username any other ideas? Adil On Wed, 14 Jan 2004, Dustin Doris wrote: On Wed, 14 Jan 2004, Adil Bikarbass wrote: Well i've noticed after reading the debug that the request with the empty username did not even hit the radius server (nothing on the debug output) But when using any character on the username i got some input : I would say that is a problem on your NAS. - Begining of Input - rad_recv: Accounting-Request packet from host my_NAS:1026, id=252, length=101 Acct-Session-Id = B85D User-Name = t NAS-IP-Address = my_NAS NAS-Port = 45 NAS-Port-Type = ISDN Acct-Status-Type = Start Acct-Authentic = RADIUS Called-Station-Id = 1 Calling-Station-Id = 037680045 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 194.204.200.232 Acct-Delay-Time = 0 modcall: entering group preacct for request 28 rlm_realm: No '/' in User-Name = t, looking up realm NULL rlm_realm: No such realm NULL modcall[preacct]: module ROAM returns noop for request 28 rlm_realm: No '@' in User-Name = t, looking up realm NULL rlm_realm: No such realm NULL modcall[preacct]: module suffix returns noop for request 28 modcall[preacct]: module files returns noop for request 28 modcall[preacct]: module preprocess returns noop for request 28 modcall: group preacct returns noop for request 28 modcall: entering group accounting for request 28 rlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request, unique ID MAY be inconsistent rlm_acct_unique: Hashing ',Client-IP-Address = my_NAS,NAS-IP-Address = my_NAS,Acct-Session-Id = B85D,User-Name = t' rlm_acct_unique: Acct-Unique-Session-ID = 2dd4757bbb6a253d. modcall[accounting]: module acct_unique returns ok for request 28 radius_xlat: '/var/log/radius/radacct/my_NAS/detail' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to /var/log/radius/radacct/my_NAS/detail modcall[accounting]: module detail returns ok for request 28 modcall[accounting]: module unix returns ok for request 28 radius_xlat: '/var/log/radius/radutmp' radius_xlat: 't' modcall[accounting]: module radutmp returns ok for request 28 modcall: group accounting returns ok for request 28 Sending Accounting-Response of id 252 to my_NAS:1026 Finished request 28 Going to the next request Waking up in 6 seconds... -- End Debug My users file contains the following DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 Please advise Adil On Wed, 14 Jan 2004, Anson Rinesmith wrote: With the supplied line in your users file, could you send me your relevant output from radiusd -X, might help debug your problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adil Bikarbass Sent: Wednesday, January 14, 2004 10:36 AM To: [EMAIL PROTECTED] Subject: RE: Blank username/password I've tried this too but with the same result when the username is not empty it's accepted otherwise it's rejeted, The problem is with empty usernames/passwords, once again i want to grant access based on the Called-Station-Id no matter what the username is (empty username). Any tips? Thanks On Wed, 14 Jan 2004, Anson Rinesmith wrote: Our users file contains the following DEFAULT entry : You have DEFAUTL Auth-Type := Accept, Called-Station-Id == 1 DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept Is Closer to what you need in your users file - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Blank username/password
Here is what i got on my PM3 when trying to connect using an empty username Begin of output -- S3: LCP Open Received UNKNOWN on port S3 of 14 bytes containing:wire bytes 18 0c 03 00 12 67 6e 33 3c 4d 53 52 41 53 56 35 2e 31 30 Received UNKNOWN on port S3 of 24 bytes containing:wire bytes 28 0c 04 00 1c 67 6e 33 3c 4d 53 52 41 53 2d 31 2d 50 43 41 42 44 45 4c 4d 41 4a 49 44 Received PAP_AUTH_REQ on port S3 of 6 bytes containing: 01 01 00 06 00 00 Sending PAP_AUTH_NAK on port S3 of 14 bytes containing:wire bytes 18 03 01 00 12 0d 49 6e 76 61 6c 69 64 20 4c 6f 67 69 6e Received LCP_TERMINATE_REQUEST on port S3 of 12 bytes containing:wire bytes 16 05 05 00 10 67 6e 33 3c 00 3c cd 74 00 00 02 b3 Sending LCP_TERMINATE_ACK on port S3 of 0 bytes containing:wire bytes 4 06 02 00 04 -- end of output And here is what i got when i use a username like hi : begin of output --- Received LCP_CONFIGURE_REQUEST on port S2 of 16 bytes containing:wire bytes 20 01 02 00 14 02 06 00 00 00 00 05 06 14 14 1b 12 07 02 08 02 Sending LCP_CONFIGURE_ACK on port S2 of 16 bytes containing:wire bytes 20 02 02 00 14 02 06 00 00 00 00 05 06 14 14 1b 12 07 02 08 02 S2: LCP Open Received UNKNOWN on port S2 of 14 bytes containing:wire bytes 18 0c 03 00 12 14 14 1b 12 4d 53 52 41 53 56 35 2e 31 30 Received UNKNOWN on port S2 of 18 bytes containing:wire bytes 22 0c 04 00 16 14 14 1b 12 4d 53 52 41 53 2d 31 2d 55 53 45 52 2d 31 Received PAP_AUTH_REQ on port S2 of 16 bytes containing: 01 00 00 10 04 6a 6f 63 6b 06 66 73 74 6f 6e 65 Sending PAP_AUTH_ACK on port S2 of 16 bytes containing:wire bytes 20 02 00 00 14 0f 4c 6f 67 69 6e 20 53 75 63 63 65 65 64 65 64 --- end of output -- Seems like my PM3 is sending a Not acking for some reason when it gets empty usernames Still investigating Adil On Wed, 14 Jan 2004, Alan DeKok wrote: Adil Bikarbass [EMAIL PROTECTED] wrote: So i'm wondering what's wrong and why i'm not getting anything in the logs if there is an empty username You're getting nothing in the logs because the NAS isn't sending any packets to FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- |-Adil Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html