Hi guys, Saya mencoba setup akses poin dengan wpa2-eap-radius untuk auth dan accounting. radius jalan dengan debian 5 , freeradius 2.1.9 (vanila), dan akses point menggunakan openwrt backfire.
Auth dan accounting sudah berjalan dg baik, hanya saja hostapd tidak memproses radius reply seperti Session-Timeout, Idle-Timeout,Acct-Interim-Interval, dll snip freeradius log: ... ... } # server inner-tunnel [peap] Got tunneled reply code 2 Max-Daily-Session := 9000 Idle-Timeout := 300 Acct-Interim-Interval := 120 Session-Timeout := 500 EAP-Message = 0x03390004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "tes" [peap] Got tunneled reply RADIUS code 2 Max-Daily-Session := 9000 Idle-Timeout := 300 Acct-Interim-Interval := 120 Session-Timeout := 500 EAP-Message = 0x03390004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "tes" [peap] Tunneled authentication was successful. [peap] SUCCESS ++[eap] returns handled hostapd log: ... ... RADIUS message: code=2 (Access-Accept) identifier=10 length=167 Attribute 26 (Vendor-Specific) length=58 Value: 00 00 01 37 11 34 85 85 d5 df e2 6e d1 21 1e fe 64 19 99 8e 4d 27 51 47 81 a5 9c fc dd e6 f6 d5 15 34 04 b7 a3 e4 31 12 89 78 25 85 ec 8d 54 6f 37 04 35 c6 b4 a2 88 5c Attribute 26 (Vendor-Specific) length=58 Value: 00 00 01 37 10 34 8d d0 bb 58 ef ec 44 c1 a7 85 41 25 96 99 6e f7 a2 79 b6 34 f3 d0 f0 4d a3 3d d5 d9 04 10 4f b0 98 34 9b c3 2d 75 53 48 ac eb 26 a3 51 c0 8a 3b 8d 8a Attribute 79 (EAP-Message) length=6 Value: 03 72 00 04 Attribute 80 (Message-Authenticator) length=18 Value: 7a e6 71 13 a0 1e 1b 01 93 14 48 2b 98 a7 bb 5a Attribute 1 (User-Name) length=7 Value: 'tes' wlan0: STA 00:24:2c:8b:08:34 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station 00:24:2c:8b:08:34 MS-MPPE-Send-Key - hexdump(len=32): 54 03 34 0b c2 1c b4 fc 6d 36 2a d4 e5 ef dd 87 72 4e 9b e9 e7 5e ce 9d c9 dc 3d 48 9c 50 0e 70 MS-MPPE-Recv-Key - hexdump(len=32): c0 82 60 51 bd 9b 76 e2 30 c0 da 8f d5 b0 3f 5a 20 bc e1 45 b3 e2 d6 08 7d 54 2a 87 44 83 41 56 wlan0: STA 00:24:2c:8b:08:34 IEEE 802.1X: old identity 'tes' updated with User-Name from Access-Accept 'tes' wlan0: STA 00:24:2c:8b:08:34 IEEE 802.1X: decapsulated EAP packet (code=3 id=114 len=4) from RADIUS server: EAP Success EAP: EAP entering state SUCCESS2 IEEE 802.1X: 00:24:2c:8b:08:34 BE_AUTH entering state SUCCESS wlan0: STA 00:24:2c:8b:08:34 IEEE 802.1X: Sending EAP Packet (identifier 114) IEEE 802.1X: 00:24:2c:8b:08:34 BE_AUTH entering state IDLE WPA: 00:24:2c:8b:08:34 WPA_PTK entering state INITPMK Saya ingin lihat jika Session-Timeout di set dan sdh tercapai, maka hostapd akan me- deauth client tsb TIA -- Deedee -- FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab Unsubscribe: kirim email ke tanya-jawab-unsubscr...@linux.or.id Arsip dan info milis selengkapnya di http://linux.or.id/milis