does anyone run this combination?
I would like to use SecurID as a RADIUS DB. I've enabled RADIUS authentification on the SecurID-Appliance via UDP port 1812. But I still have problems with the connection between Astaro and SecurID. L2TP/IPSec is running well, cause I've tested it with a user, which was generated on ASG itself.
This is the "log-information" I've gotten:
2007:09:17-11:07:10 (none) l2tpd[12192]: check_control: control, cid = 1, Ns = 4, Nr = 2
2007:09:17-11:07:10 (none) l2tpd[12192]: handle_avps: handling avp's for tunnel 32544, call 62043
2007:09:17-11:07:10 (none) l2tpd[12192]: message_type_avp: message type 14 (Call-Disconnect-Notify)
2007:09:17-11:07:10 (none) l2tpd[12192]: result_code_avp: peer closing for reason 3 (Control channel already exists), error = 0 ()
2007:09:17-11:07:10 (none) l2tpd[12192]: assigned_call_avp: using peer's call 1
2007:09:17-11:07:10 (none) l2tpd[12192]: control_finish: Peer tried to disconnect with invalid CID (1 != 62043)
2007:09:17-11:07:10 (none) l2tpd[12192]: check_control: control, cid = 0, Ns = 5, Nr = 2
2007:09:17-11:07:10 (none) l2tpd[12192]: handle_avps: handling avp's for tunnel 32544, call 6875
2007:09:17-11:07:10 (none) l2tpd[12192]: message_type_avp: message type 4 (Stop-Control-Connection-Notification)
2007:09:17-11:07:10 (none) l2tpd[12192]: assigned_tunnel_avp: using peer's tunnel 23
2007:09:17-11:07:10 (none) l2tpd[12192]: result_code_avp: peer closing for reason 6 (Requester is being shut down), error = 0 ()
2007:09:17-11:07:10 (none) l2tpd[12192]: control_finish: Peer tried to disconnect with invalid TID (23 != 32544)
2007:09:17-11:07:10 (none) pppd-l2tp[13990]: rc_ip_hostname: couldn't look up host by addr: %lX
2007:09:17-11:07:10 (none) pppd-l2tp[13990]: rc_send_server: no reply from RADIUS server unknown:1812
2007:09:17-11:07:10 (none) pppd-l2tp[13990]: Peer administrator failed CHAP authentication
2007:09:17-11:07:10 (none) pppd-l2tp[13990]: sent [CHAP Failure id=0x3b "\37777777630\024\r\010i\37777777673\001"]
2007:09:17-11:07:10 (none) pppd-l2tp[13990]: sent [LCP TermReq id=0x5 "Authentication failed"]
2007:09:17-11:07:10 (none) pppd-l2tp[13990]: rcvd [CHAP Response id=0x3b
Does anyone have any idee? Maybe I need a special "policy" or "packet filter rule" for the RADIUS-functionality? Is there any whitepaper or smth. like that, which describes this implementation?
Thanks a lot for your time,
RGS,
/*-peter
This thread was automatically locked due to age.