Radius AAA Server - request from unknown client

[Herdip Kalare_1]

I have recently installed AAA server and the required Java and Web Server software. I am now attempting to configure the server to allow authentication for users logging onto a Cyclades network terminal concentrator. The Cyclades makes the call to the HP-UX machine but does not get a response. I have edited the clients file to include the i.p. address of the Cyclades, but I get an error message stating that the request has come from a unkown host. Am I missing some configuration on the HP side, any ideas ??

Regards,
Herdip

[Herdip Kalare_1]

I think that the cause maybe the fact that the HP-UX host is a trusted system, and password authentication for trusted systems is not currently supported. Anyone, know of any ways around this.

Regards,
Herdip

[rmueller58]

We are using freeradius for our wireless authentication..
We make sure your users file has the MAC address of the client in question..

What are you using for your authentication database?

our Radiusd uses a /usr/local/etc/raddb/users file for authentication of the MAC

00022b-0822a7 Auth-Type := Local, User-Password == "masked for security"
#ESU-AP1000 (UPSTAIRS

00022c-07103af Auth-Type := Local, User-Password == "masked for security"
#ESU-AP1000 (UPSTAIRS

Is it running on HP/UX or Linux?

Is it exposed to the world or inside your intranet? All will influence how you want to set it up.

[rmueller58 · Accepted solution]

Check out
http://www.freeradius.org/

for more references.. You can watch the message look and see what errors are being returned, this may help in the debugging process..

[rmueller58]

Herdip,

it require a bit of documentation from your
NTC vendor too.. We are using Lucent WAPs it took a bit of experimentation to get the systems to handshake..

[Herdip Kalare_1]

Rex,

I have worked with the NTC Vendor to set this up and I am pretty confident that the kit is doing what is requested of it.

For authentication I was planning to use the /etc/passwd files, but due to our system being a trusted system it would appear that this is not possible.

I will certainly take a look at the web site for further help.

Thanks,
Herdip