RE: WiMax VSA Support

2010-10-07 Thread Ben Wiechman
I don't have access to an Alvarion ASN-GW so I can't specifically test this
all. Looking back over the service assignment again I see I didn't grab
everything. I did grab the QOS descriptors, but missed the packet flow
descriptor.

This is the corrected full sample service that provisions services of
2Mbps/512kbps. 
WiMAX-QoS-Id:=  101
WiMAX-Service-Class-Name:=  DATA
WiMAX-Schedule-Type :=  Best-Effort
WiMAX-Traffic-Priority  :=  1
WiMAX-Maximum-Sustained-Traffic-Rate:=  512000
WiMAX-Reduced-Resources-Code:=  1
WiMAX-QoS-Id+=  102
WiMAX-Service-Class-Name+=  DATA
WiMAX-Schedule-Type +=  Best-Effort
WiMAX-Traffic-Priority  +=  1
WiMAX-Maximum-Sustained-Traffic-Rate+=  2097152
WiMAX-Reduced-Resources-Code+=  1
WiMAX-Packet-Data-Flow-Id   :=  22
WiMAX-Service-Data-Flow-Id  :=  22
WiMAX-Direction :=  Bi-Directional
WiMAX-Activation-Trigger:=  15
WiMAX-Transport-Type:=  IPv4-CS
WiMAX-Uplink-QOS-Id :=  101
WiMAX-Downlink-QOS-Id   :=  102
WiMAX-Uplink-Classifier :=  permit in any src any dst any
priority 1
WiMAX-Downlink-Classifier   :=  permit in any src any dst any
priority 1

The root is that you need to read and understand the interdependencies of
the QOS descriptor and packet flow descriptor if you want to do this.
Seriously. It isn't entirely trivial and there are differences depending on
the Schedule Type. 
Again... check out the WMF stage three docs for whichever version of the WMF
the Alvarion ASN-GW currently supports, namely these sections:
5.4.2.28 Packet-Flow Descriptor
5.4.2.29 QoS-Descriptor and Table 5-10
The requirements are outlined there. 

You can also pre-provision the services on the ASN-GW and simply supply the
proper service ID information. 
e.g.
WiMAX-Packet-Data-Flow-Id   :=  30
WiMAX-Service-Data-Flow-Id  :=  30
WiMAX-Service-Profile-Id:=  30
WiMAX-Packet-Data-Flow-Id   +=  110
WiMAX-Service-Data-Flow-Id  +=  110
WiMAX-Service-Profile-Id+=  110
Where the services listed are defined on the ASN-GW with those ID numbers. 

Which of the above methods to use is going to depend on your requirements.

Having said that, Alvarion has had a history of... creative...
interpretations of various standards. Without a sample Access-Accept that
apparently works when using the Filter-Id I can't compare. 

I would do the following:
Ensure there aren't any differences in the non-QOS attributes being returned
in the two separate cases: the working Filter-Id network entry and the
second failing case. Alvarion's errors aren't always explanatory or related
to the actual root cause so the strange error you are getting may be related
to services, or may be related to an EAP or other underlying issue. Again, I
don't have an Alvarion ASN-GW so I can't tell you. 

Once you are sure there are not any other EAP issues, it may be easier to
use the second method to provision services until you actually understand
the details of the packet flow descriptor and qos descriptor. Your ASN-GW
may or may not have the same requirements as ours depending on which WMF
release is supported, and how well that release is supported. 

Ben 


 -Original Message-
 From: freeradius-users-
 bounces+wiechman.lists=gmail@lists.freeradius.org
 [mailto:freeradius-users-
 bounces+wiechman.lists=gmail@lists.freeradius.org] On Behalf Of
 Anup
 Sent: Thursday, October 07, 2010 12:19 AM
 To: FreeRadius users mailing list
 Subject: Re: WiMax VSA Support
 
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: WiMax VSA Support

2010-10-06 Thread Anup krishnan A

Hi Alan,

Thank you for your quick response.

We have already checked the dictionary and found that wimax dictionary is
available in the freeradius server.

Actually we are using Freeradius server 2.1.9 and Alvarion base-station
and Alvarion ASN GW. Initially we created a service profile in Alvarion
ASN GW for the user test using their management software 'AlvariStar'.
And 'users' file in the freeradius has been updated to add the user test
as follows,

test Cleartext-Password := test
Auth-Type = Local,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.0.33,
Framed-IP-Netmask = 255.255.255.0,
Framed-Routing = Broadcast-Listen,
Filter-Id = servprof2

where servprof2 is the name of the service profile created in Alvarion
ASN GW. In this case the authentication was successful and MS has got the
IP as well.

Then we tried to create the service profile for the user test from the
Freeradius by using WiMAX attributes found in the file
dictionary.wimax'.The entries for the user in the 'users' file is as shown
below.

test Cleartext-Password := test
Auth-Type = Local,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.0.33,
Framed-IP-Netmask = 255.255.255.0,
WiMAX-Service-Profile-Id=1,
WiMAX-Media-Flow-Type=Streaming-Video,
WiMAX-Schedule-Type = Best-Effort,
WiMAX-QoS-Id=01,
WiMAX-Media-Flow-Type=Robust-Browser,
WiMAX-Traffic-Priority=0,
WiMAX-Maximum-Sustained-Traffic-Rate=512000

In this case Freeradius has sent the Access-Accept, but the authentication
process is not successful and MS is showing an error message as EAP
supplicant transferring error.

I hope you understand the problem

Regards,
Anup



 Anup wrote:
 Hi,
 I would like to know whether latest Freeradius version has the support
 for WiMax VSAs?

   The server comes with documentation and dictionary files.  Please read
 them.

 Also please tell me how to send the WiMAX Qos
 Descriptors in Access-Accept

   VSAs are just attributes.  They can be added / edited like anything
 else.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-
This email was sent using SquirrelMail.
   Webmail for nuts!
http://squirrelmail.org/


__
Scanned and protected by Email scanner
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: WiMax VSA Support

2010-10-06 Thread David Peterson
Anup,

You have to configure the radius server to use the inner-tunnel.  Which
version of the 4-Motion software are you using on your system?

David


-Original Message-
From:
freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org
[mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.freeradiu
s.org] On Behalf Of Anup krishnan A
Sent: Wednesday, October 06, 2010 4:11 AM
To: FreeRadius users mailing list
Subject: Re: WiMax VSA Support


Hi Alan,

Thank you for your quick response.

We have already checked the dictionary and found that wimax dictionary is
available in the freeradius server.

Actually we are using Freeradius server 2.1.9 and Alvarion base-station and
Alvarion ASN GW. Initially we created a service profile in Alvarion ASN GW
for the user test using their management software 'AlvariStar'.
And 'users' file in the freeradius has been updated to add the user test
as follows,

test Cleartext-Password := test
Auth-Type = Local,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.0.33,
Framed-IP-Netmask = 255.255.255.0,
Framed-Routing = Broadcast-Listen,
Filter-Id = servprof2

where servprof2 is the name of the service profile created in Alvarion ASN
GW. In this case the authentication was successful and MS has got the IP as
well.

Then we tried to create the service profile for the user test from the
Freeradius by using WiMAX attributes found in the file dictionary.wimax'.The
entries for the user in the 'users' file is as shown below.

test Cleartext-Password := test
Auth-Type = Local,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.0.33,
Framed-IP-Netmask = 255.255.255.0,
WiMAX-Service-Profile-Id=1,
WiMAX-Media-Flow-Type=Streaming-Video,
WiMAX-Schedule-Type = Best-Effort,
WiMAX-QoS-Id=01,
WiMAX-Media-Flow-Type=Robust-Browser,
WiMAX-Traffic-Priority=0,
WiMAX-Maximum-Sustained-Traffic-Rate=512000

In this case Freeradius has sent the Access-Accept, but the authentication
process is not successful and MS is showing an error message as EAP
supplicant transferring error.

I hope you understand the problem

Regards,
Anup



 Anup wrote:
 Hi,
 I would like to know whether latest Freeradius version has the 
 support for WiMax VSAs?

   The server comes with documentation and dictionary files.  Please 
 read them.

 Also please tell me how to send the WiMAX Qos Descriptors in 
 Access-Accept

   VSAs are just attributes.  They can be added / edited like anything 
 else.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-
This email was sent using SquirrelMail.
   Webmail for nuts!
http://squirrelmail.org/


__
Scanned and protected by Email scanner
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: WiMax VSA Support

2010-10-06 Thread Anup krishnan A
Hi David,

1)  You have to configure the radius server to use the inner-tunnel.

Following are the entries in the eap.conf file.
ttls {
default_eap_type = md5
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = inner-tunnel
}

I hope this is what you meant by configure inner-tunnel in radius server.

Actually, the FreeRadius server is sending the Access-Accept with all WiMAX
Attributes for the user as we have given in the users file.
But  I think the Alvarion ASN Gateway is not handling or recognizing what we
are sending

2) Which version of the 4-Motion software are you using on your system?
We are using 4motion Release 2.5M1.


Regards
Anup


 Anup,

 You have to configure the radius server to use the inner-tunnel.  Which
 version of the 4-Motion software are you using on your system?

 David


 -Original Message-
 From:
 freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org
 [mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.freeradiu
 s.org] On Behalf Of Anup krishnan A
 Sent: Wednesday, October 06, 2010 4:11 AM
 To: FreeRadius users mailing list
 Subject: Re: WiMax VSA Support


 Hi Alan,

 Thank you for your quick response.

 We have already checked the dictionary and found that wimax dictionary is
 available in the freeradius server.

 Actually we are using Freeradius server 2.1.9 and Alvarion base-station
 and
 Alvarion ASN GW. Initially we created a service profile in Alvarion ASN GW
 for the user test using their management software 'AlvariStar'.
 And 'users' file in the freeradius has been updated to add the user test
 as follows,

 test Cleartext-Password := test
   Auth-Type = Local,
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.0.33,
   Framed-IP-Netmask = 255.255.255.0,
   Framed-Routing = Broadcast-Listen,
   Filter-Id = servprof2

 where servprof2 is the name of the service profile created in Alvarion
 ASN
 GW. In this case the authentication was successful and MS has got the IP
 as
 well.

 Then we tried to create the service profile for the user test from the
 Freeradius by using WiMAX attributes found in the file
 dictionary.wimax'.The
 entries for the user in the 'users' file is as shown below.

 test Cleartext-Password := test
   Auth-Type = Local,
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.0.33,
   Framed-IP-Netmask = 255.255.255.0,
   WiMAX-Service-Profile-Id=1,
   WiMAX-Media-Flow-Type=Streaming-Video,
   WiMAX-Schedule-Type = Best-Effort,
   WiMAX-QoS-Id=01,
   WiMAX-Media-Flow-Type=Robust-Browser,
   WiMAX-Traffic-Priority=0,
   WiMAX-Maximum-Sustained-Traffic-Rate=512000

 In this case Freeradius has sent the Access-Accept, but the authentication
 process is not successful and MS is showing an error message as EAP
 supplicant transferring error.

 I hope you understand the problem

 Regards,
 Anup



 Anup wrote:
 Hi,
 I would like to know whether latest Freeradius version has the
 support for WiMax VSAs?

   The server comes with documentation and dictionary files.  Please
 read them.

 Also please tell me how to send the WiMAX Qos Descriptors in
 Access-Accept

   VSAs are just attributes.  They can be added / edited like anything
 else.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




 -
 This email was sent using SquirrelMail.
Webmail for nuts!
 http://squirrelmail.org/


 __
 Scanned and protected by Email scanner
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-
This email was sent using SquirrelMail.
   Webmail for nuts!
http://squirrelmail.org/


__
Scanned and protected by Email scanner
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: WiMax VSA Support

2010-10-06 Thread David Peterson
I have not had any issues with 2.5 though 3.0 is giving me fits.   Your eap
configuration looks ok, check sites-available/inner-tunnel and make sure you
have all of the wimax entries uncommented.

David


-Original Message-
From: Anup krishnan A [mailto:anupk...@cdactvm.in] 
Sent: Wednesday, October 06, 2010 8:07 AM
To: David Peterson-WirelessConnections; FreeRadius users mailing list
Subject: RE: WiMax VSA Support

Hi David,

1)  You have to configure the radius server to use the inner-tunnel.

Following are the entries in the eap.conf file.
ttls {
default_eap_type = md5
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = inner-tunnel
}

I hope this is what you meant by configure inner-tunnel in radius server.

Actually, the FreeRadius server is sending the Access-Accept with all WiMAX
Attributes for the user as we have given in the users file.
But  I think the Alvarion ASN Gateway is not handling or recognizing what we
are sending

2) Which version of the 4-Motion software are you using on your system?
We are using 4motion Release 2.5M1.


Regards
Anup


 Anup,

 You have to configure the radius server to use the inner-tunnel.  
 Which version of the 4-Motion software are you using on your system?

 David


 -Original Message-
 From:
 freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.
 freeradius-users-bounces+org
 [mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.fre
 eradiu
 s.org] On Behalf Of Anup krishnan A
 Sent: Wednesday, October 06, 2010 4:11 AM
 To: FreeRadius users mailing list
 Subject: Re: WiMax VSA Support


 Hi Alan,

 Thank you for your quick response.

 We have already checked the dictionary and found that wimax dictionary 
 is available in the freeradius server.

 Actually we are using Freeradius server 2.1.9 and Alvarion 
 base-station and Alvarion ASN GW. Initially we created a service 
 profile in Alvarion ASN GW for the user test using their management 
 software 'AlvariStar'.
 And 'users' file in the freeradius has been updated to add the user test
 as follows,

 test Cleartext-Password := test
   Auth-Type = Local,
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.0.33,
   Framed-IP-Netmask = 255.255.255.0,
   Framed-Routing = Broadcast-Listen,
   Filter-Id = servprof2

 where servprof2 is the name of the service profile created in 
 Alvarion ASN GW. In this case the authentication was successful and MS 
 has got the IP as well.

 Then we tried to create the service profile for the user test from 
 the Freeradius by using WiMAX attributes found in the file 
 dictionary.wimax'.The entries for the user in the 'users' file is as 
 shown below.

 test Cleartext-Password := test
   Auth-Type = Local,
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.0.33,
   Framed-IP-Netmask = 255.255.255.0,
   WiMAX-Service-Profile-Id=1,
   WiMAX-Media-Flow-Type=Streaming-Video,
   WiMAX-Schedule-Type = Best-Effort,
   WiMAX-QoS-Id=01,
   WiMAX-Media-Flow-Type=Robust-Browser,
   WiMAX-Traffic-Priority=0,
   WiMAX-Maximum-Sustained-Traffic-Rate=512000

 In this case Freeradius has sent the Access-Accept, but the 
 authentication process is not successful and MS is showing an error 
 message as EAP supplicant transferring error.

 I hope you understand the problem

 Regards,
 Anup



 Anup wrote:
 Hi,
 I would like to know whether latest Freeradius version has the 
 support for WiMax VSAs?

   The server comes with documentation and dictionary files.  Please 
 read them.

 Also please tell me how to send the WiMAX Qos Descriptors in 
 Access-Accept

   VSAs are just attributes.  They can be added / edited like anything 
 else.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




 -
 This email was sent using SquirrelMail.
Webmail for nuts!
 http://squirrelmail.org/


 __
 Scanned and protected by Email scanner
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-
This email was sent using SquirrelMail.
   Webmail for nuts!
http://squirrelmail.org/


__
Scanned and protected by Email scanner

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: WiMax VSA Support

2010-10-06 Thread Alan DeKok
Anup krishnan A wrote:
 Then we tried to create the service profile for the user test from the
 Freeradius by using WiMAX attributes found in the file
 dictionary.wimax'.The entries for the user in the 'users' file is as shown
 below.
...
 In this case Freeradius has sent the Access-Accept, but the authentication
 process is not successful and MS is showing an error message as EAP
 supplicant transferring error.

  Well.. blame the NAS.  If the Access-Accept is returned and the user
isn't accepted on the network, it is *not* the fault of the RADIUS server.

  Some versions of Alvarion had inventive ways of implementing the
standards.  i.e. they didn't work.

  Newer versions (last 4-6 months) should be better.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: WiMax VSA Support

2010-10-06 Thread Ben Wiechman
That service profile does not look at all correct. It's a mixed bag of
pre-provisioned services and AAA provisioned services.

Here is a sample service definition that works with our ASN-GW:
WiMAX-QoS-Id:=  101
WiMAX-Service-Class-Name:=  DATA
WiMAX-Schedule-Type :=  Best-Effort
WiMAX-Traffic-Priority  :=  1
WiMAX-Maximum-Sustained-Traffic-Rate:=  512000
WiMAX-Reduced-Resources-Code:=  1
WiMAX-QoS-Id+=  102
WiMAX-Service-Class-Name+=  DATA
WiMAX-Schedule-Type +=  Best-Effort
WiMAX-Traffic-Priority  +=  1
WiMAX-Maximum-Sustained-Traffic-Rate+=  20971520
WiMAX-Reduced-Resources-Code+=  1 

We're using Wichorus, but in working with other vendors and service
providers in the past who were using the Alvarion ASN-GW I don't recall that
there were significant differences in QOS assignment at least. Looking back
through my notes it does appear that most of them were using the proprietary
Filter-ID method of service assignment. Using the Filter-Id might help rule
out any strange EAP issues. 

Studying the table of attributes in the WiMAX forum stage three docs (Tables
in section 5) also helps explain which TLVs are required and which are not
when generating the appropriate responses. 

Ben

 -Original Message-
 From: freeradius-users-
 bounces+wiechman.lists=gmail@lists.freeradius.org
 [mailto:freeradius-users-
 bounces+wiechman.lists=gmail@lists.freeradius.org] On Behalf Of
 Anup krishnan A
 Sent: Wednesday, October 06, 2010 3:11 AM
 To: FreeRadius users mailing list
 Subject: Re: WiMax VSA Support
 
 
 Hi Alan,
 
 Thank you for your quick response.
 
 We have already checked the dictionary and found that wimax dictionary
 is
 available in the freeradius server.
 
 Actually we are using Freeradius server 2.1.9 and Alvarion base-station
 and Alvarion ASN GW. Initially we created a service profile in Alvarion
 ASN GW for the user test using their management software
 'AlvariStar'.
 And 'users' file in the freeradius has been updated to add the user
 test
 as follows,
 
 test Cleartext-Password := test
   Auth-Type = Local,
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.0.33,
   Framed-IP-Netmask = 255.255.255.0,
   Framed-Routing = Broadcast-Listen,
   Filter-Id = servprof2
 
 where servprof2 is the name of the service profile created in
 Alvarion
 ASN GW. In this case the authentication was successful and MS has got
 the
 IP as well.
 
 Then we tried to create the service profile for the user test from
 the
 Freeradius by using WiMAX attributes found in the file
 dictionary.wimax'.The entries for the user in the 'users' file is as
 shown
 below.
 
 test Cleartext-Password := test
   Auth-Type = Local,
   Service-Type = Framed-User,
   Framed-Protocol = PPP,
   Framed-IP-Address = 192.168.0.33,
   Framed-IP-Netmask = 255.255.255.0,
   WiMAX-Service-Profile-Id=1,
   WiMAX-Media-Flow-Type=Streaming-Video,
   WiMAX-Schedule-Type = Best-Effort,
   WiMAX-QoS-Id=01,
   WiMAX-Media-Flow-Type=Robust-Browser,
   WiMAX-Traffic-Priority=0,
   WiMAX-Maximum-Sustained-Traffic-Rate=512000
 
 In this case Freeradius has sent the Access-Accept, but the
 authentication
 process is not successful and MS is showing an error message as EAP
 supplicant transferring error.
 
 I hope you understand the problem
 
 Regards,
 Anup
 
 
 
  Anup wrote:
  Hi,
  I would like to know whether latest Freeradius version has the
 support
  for WiMax VSAs?
 
The server comes with documentation and dictionary files.  Please
 read
  them.
 
  Also please tell me how to send the WiMAX Qos
  Descriptors in Access-Accept
 
VSAs are just attributes.  They can be added / edited like anything
  else.
 
Alan DeKok.
  -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 
 
 
 
 -
 This email was sent using SquirrelMail.
Webmail for nuts!
 http://squirrelmail.org/
 
 
 __
 Scanned and protected by Email scanner
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: WiMax VSA Support

2010-10-06 Thread Anup
] eaptls_process returned 7
[ttls] Session established.  Proceeding to decode tunneled attributes.
[ttls] Got tunneled request
   User-Name = test
   User-Password = test
   FreeRADIUS-Proxied-To = 127.0.0.1
[ttls] Sending tunneled request
   User-Name = test
   User-Password = test
   FreeRADIUS-Proxied-To = 127.0.0.1
   NAS-Identifier = 172.16.0.1
   NAS-IP-Address = 172.16.0.1
   Calling-Station-Id = 00-17-C4-9B-B5-84
   WiMAX-BS-Id = 0x020202060606
   NAS-Port-Type = 27
   Framed-MTU = 2000
   Service-Type = Framed-User
   WiMAX-GMT-Timezone-offset = 0
server inner-tunnel {
+- entering group authorize {...}
++[chap] returns noop
++[mschap] returns noop
++[unix] returns notfound
[suffix] No '@' in User-Name = test, looking up realm NULL
[suffix] Found realm NULL
[suffix] Adding Stripped-User-Name = test
[suffix] Adding Realm = NULL
[suffix] Authentication realm is LOCAL.
++[suffix] returns ok
++[control] returns ok
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[files] users: Matched entry test at line 110
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns updated
Found Auth-Type = PAP
+- entering group PAP {...}
[pap] login attempt with password test
[pap] Using clear text password test
[pap] User authenticated successfully
++[pap] returns ok
 WARNING: Empty post-auth section.  Using default return values.
} # server inner-tunnel
[ttls] Got tunneled reply code 2
   Auth-Type = Local
   Service-Type = Framed-User
   Framed-Protocol = PPP
   Framed-IP-Address = 192.168.0.33
   Framed-IP-Netmask = 255.255.255.0
   WiMAX-QoS-Id := 101
   WiMAX-Service-Class-Name := DATA
   WiMAX-Schedule-Type := Best-Effort
   WiMAX-Traffic-Priority := 1
   WiMAX-Maximum-Sustained-Traffic-Rate := 512000
   WiMAX-Reduced-Resources-Code := 1
[ttls] Got tunneled Access-Accept
[eap] Freeing handler
++[eap] returns ok
+- entering group post-auth {...}
[sql_log] Processing sql_log_postauth
[sql_log]   expand: %{User-Name} - {am=1}a...@local
[sql_log]   expand: %{%{User-Name}:-DEFAULT} - {am=1}a...@local
[sql_log] sql_set_user escaped user -- '{am=1}a...@local'
[sql_log] WARNING: Deprecated conditional expansion :-.  See man unlang 
for details

[sql_log]   ... expanding second conditional
[sql_log]   expand: Chap-Password - Chap-Password
[sql_log]   expand: INSERT INTO radpostauth 
(username, pass, reply, authdate) VALUES 
('%{User-Name}', '%{User-Password:-Chap-Password}', 
'%{reply:Packet-Type}', '%S'); - INSERT INTO radpostauth 
(username, pass, reply, authdate) VALUES 
('{am=1}a...@local', 'Chap-Password',   'Access-Accept', '2010-10-07 
16:38:37');
[sql_log]   expand: /usr/local/var/log/radius/radacct/sql-relay - 
/usr/local/var/log/radius/radacct/sql-relay

++[sql_log] returns ok
++[exec] returns noop
[wimax] MIP-RK = 
0xef87c598c604f52d8887df1b5dbf19c0a5d5b038d5f2cc05a4040b6550d6dfdbd86632053845cc46e7daf620649d4418751f7e0ee9ff3ff8b3a0a9a8f865b61c

[wimax] MIP-SPI = bf1b4edd
[wimax] WARNING: WiMAX-MN-NAI was not found in the request or in the reply.
[wimax] WARNING: We cannot calculate MN-HA keys.
[wimax] WARNING: WiMAX-IP-Technology not found in reply.
[wimax] WARNING: Not calculating MN-HA keys
++[wimax] returns updated
++? if (updated)
? Evaluating (updated) - TRUE
++? if (updated) - TRUE
++- entering if (updated) {...}
+++[reply] returns updated
++- if (updated) returns updated
Sending Access-Accept of id 106 to 172.16.0.1 port 1812
   Service-Type = Framed-User
   Framed-Protocol = PPP
   Framed-IP-Address = 192.168.0.33
   Framed-IP-Netmask = 255.255.255.0
   WiMAX-QoS-Id = 101
   WiMAX-Service-Class-Name = DATA
   WiMAX-Schedule-Type = Best-Effort
   WiMAX-Traffic-Priority = 1
   WiMAX-Maximum-Sustained-Traffic-Rate = 512000
   WiMAX-Reduced-Resources-Code = 1
   EAP-Message = 0x03070004
   Message-Authenticator = 0x
   User-Name = {am=1}abcd
   WiMAX-MSK = 
0x58fd064ed193962abcd676849e5d350bce02cdd98153a2577f05a2727221d6368200c817698638447d9964dd5bb1aab61c706753cf6b784bd31eef4c479f689c

Finished request 6.
Going to the next request
Waking up in 4.2 seconds.




Regards
Anup
--
From: Ben Wiechman wiechman.li...@gmail.com
Sent: Wednesday, October 06, 2010 10:59 PM
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Subject: RE: WiMax VSA Support


That service profile does not look at all correct. It's a mixed bag of
pre-provisioned services and AAA provisioned services.

Here is a sample service definition that works with our ASN-GW:
WiMAX-QoS-Id  :=  101
WiMAX-Service-Class-Name := DATA
WiMAX-Schedule-Type := Best-Effort
WiMAX-Traffic-Priority := 1
WiMAX-Maximum-Sustained-Traffic-Rate := 512000
WiMAX-Reduced-Resources-Code := 1
WiMAX-QoS-Id += 102
WiMAX-Service-Class-Name += DATA
WiMAX

WiMax VSA Support

2010-10-05 Thread Anup
Hi, 
I would like to know whether latest Freeradius version has the support for 
WiMax VSAs? Also please tell me how to send the WiMAX Qos Descriptors in 
Access-Accept

Regards 
Anup

__
Scanned and protected by Email scanner
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: WiMax VSA Support

2010-10-05 Thread Alan DeKok
Anup wrote:
 Hi,
 I would like to know whether latest Freeradius version has the support
 for WiMax VSAs?

  The server comes with documentation and dictionary files.  Please read
them.

 Also please tell me how to send the WiMAX Qos
 Descriptors in Access-Accept

  VSAs are just attributes.  They can be added / edited like anything else.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Wimax VSA support

2007-10-17 Thread Alan DeKok
katro kar wrote:
   Does the latest 2.0-pre of freeradius support
 parsing of wimax VSA attributes ?

  No.

 If it is not (I feel it is not supported yet, as i
 could not see any dictionary for wimax vsa), is there
 any plans or work in progress to implement it ?

  There are no plans to support it.  i.e. If someone sends in a patch,
or supports the feature via some other method, then it will go in.

 Another question is, does the wimax forum dictate what
 to be done with these attributes in radius server ?

  Yes.  The WiMAX NWG specification has detailed requirements.  You need
to be a member of the WiMAX forum to obtain the specifications, I believe.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE : Re: Wimax VSA support

2007-10-17 Thread Geoffroy Arnoud

  Another question is, does the wimax forum dictate
 what
  to be done with these attributes in radius server
 ?
 
   Yes.  The WiMAX NWG specification has detailed
 requirements.  You need
 to be a member of the WiMAX forum to obtain the
 specifications, I believe.
 
Since v1, the specifications are freely available on
WiMAX forum web site:
http://www.wimaxforum.org/technology/documents/

Geoff.


  
_ 
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail 
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Wimax VSA support

2007-10-16 Thread katro kar
Hi,
  Does the latest 2.0-pre of freeradius support
parsing of wimax VSA attributes ?

If it is not (I feel it is not supported yet, as i
could not see any dictionary for wimax vsa), is there
any plans or work in progress to implement it ?

Another question is, does the wimax forum dictate what
to be done with these attributes in radius server ?

Thanks
Katro


  ___
Yahoo! Answers - Got a question? Someone out there knows the answer. Try it
now.
http://uk.answers.yahoo.com/ 
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Help: Adding WiMAX VSA support

2007-07-25 Thread Govardhana K N
Hi,

I am using WiMAX supported client, so the attribute format for WiMAX
is like Attribute-Type, Length, CONTINUATION, and Value.

How can I modify the server to send the attributes in this format?


Thanks  Regards,
Govardhana K N

-- 
With Regards,
Govardhana K N
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Help: Adding WiMAX VSA support

2007-07-25 Thread Govardhana K N

Thanks Alan, I am working on it.

Also some attributes also has sub TLV's how can I add them? Do I have to
change any structures?

Thanks  Regards,
Govardhana K N


On 7/25/07, Alan DeKok [EMAIL PROTECTED] wrote:


Govardhana K N wrote:
 Hi,

 I am using WiMAX supported client, so the attribute format for WiMAX
 is like Attribute-Type, Length, CONTINUATION, and Value.

 How can I modify the server to send the attributes in this format?

Edit src/lib/radius.c.  That's the code that does packing / unpacking
of all RADIUS attributes.

The continuation field will cause additional complications.  The
TLV's inside of TLV's will also cause additional complications.

Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html





--
With Regards,
Govardhana K N
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help: Adding WiMAX VSA support

2007-07-25 Thread Alan DeKok
Govardhana K N wrote:
 Thanks Alan, I am working on it.
  
 Also some attributes also has sub TLV's how can I add them? Do I have to
 change any structures?

  You'll have to change some structures.  It involves some careful
changes to the server.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html