Newsgroup: it.comp.reti.cisco
Titolo: [AIUTO][LUNGO] Problema di Autenticazione tra 3660 e Radius su linux

Ciao a tutti,
questa settimana ho un altro problema che mi dovete risolvere  :-)
Ho un cisco 3660 che attraverso AAA deve autenticare su un linux radius
cistron 1.6.6
CHIARAMENTE NON FUNZIONA!  Purtroppo non ne vengo fuori.
Ho ipotizzato che fosse la compatibilita' tra Radius e l'IOS infatti radius
1.6.6 certifica fino alla 12.1 ma io non posso mettere una 12.1 perche'
altrimenti non mi vedrebbe alcune interfacce,
avete altre idee?
e' capitato ad altri?
sono incompleti i comandi AAA?
devo buttare il router?
Qui di seguito vi posto la conf del router e la ver.
----------------------------------------------------------------------------
---------------------------------------------------------------------------
Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3660-IK2O3S-M), Version 12.1(5)T9,  RELEASE
SOFTWARE (fc1)
TAC Support: 
http://www.cisco.com/tac
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Sat 23-Jun-01 09:31 by cmong
Image text-base: 0x60008960, data-base: 0x612E0000
ROM: System Bootstrap, Version 12.0(6r)T, RELEASE SOFTWARE (fc1)
System returned to ROM by power-on
System image file is "flash:c3660-ik2o3s-mz.121-5.T9.bin"
cisco c3660 (R527x) processor (revision C0) with 253952K/8192K bytes of
memory.
Processor board ID JAC0540A1KD
R527x CPU at 225Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
Basic Rate ISDN software, Version 1.1.
3660 Chassis type: ENTERPRISE
DRAM configuration is 64 bits wide with parity disabled.
125K bytes of non-volatile configuration memory.
24576K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
----------------------------------------------------------------------------
---------------------------------------------------------------------------
username admin password x
clock timezone MET 1
clock summer-time MET+1 recurring last Sun Mar 2:00 last Sun Oct 3:00
aaa new-model
!
aaa authentication login default local group radius
aaa authentication login consoleport none
aaa authentication ppp default if-needed group radius
aaa authorization network default group radius none
aaa accounting delay-start
aaa accounting network default wait-start group radius
aaa session-id common
ip subnet-zero
!
isdn switch-type basic-net3
!
mta receive maximum-recipients 0
!
interface FastEthernet0/0
 ip address ccc.ccc.ccc.ccc 255.255.254.0
 duplex auto
 speed auto
!
interface BRI4/0
 no ip address
 encapsulation ppp
 dialer pool-member 1
 isdn switch-type basic-net3
 ppp authentication chap pap
!
interface Dialer1
 ip unnumbered FastEthernet0/0
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 3600
 dialer-group 1
 no cdp enable
 ppp authentication chap pap
!
ip classless
!
access-list 1 permit any
dialer-list 1 protocol ip permit
!
radius-server host yyy.yyy.yyy.yyy auth-port 1645 acct-port 1646
radius-server key my-secret-key
radius-server authorization permit missing Service-Type
call rsvp-sync
----------------------------------------------------------------------------
---------------------------------------------------------------------------

 call rsvp-sync
Ciao faci sapere!

 Ciao faci sapere!
Non funziona assolutamente!!!
Provo a postare al NG anche uno stralcio di debug
*Mar  1 04:43:35.558: %LINK-3-UPDOWN: Interface BRI4/0:1, changed state to
up
*Mar  1 04:43:35.558: %ISDN-6-CONNECT: Interface BRI4/0:1 is now connected
to telefono
*Mar  1 04:43:35.558: BR4/0:1 PPP: Treating connection as a callin
*Mar  1 04:43:35.558: BR4/0:1 PPP: Phase is ESTABLISHING, Passive Open
*Mar  1 04:43:35.558: BR4/0:1 LCP: State is Listen
*Mar  1 04:43:36.458: %ISDN-6-LAYER2UP: Lar 2 for Interface BR4/0, TEI 98
changed to up
*Mar  1 04:43:37.558: BR4/0:1 LCP: TIMEout: State Listen
*Mar  1 04:43:37.558: BR4/0:1 AAA/AUTHOR/FSM: (0): LCP succeeds trivially
*Mar  1 04:43:37.558: BR4/0:1 LCP: O CONFREQ [Listen] id 9 len 15
*Mar  1 04:43:37.558: BR4/0:1 LCP:    AuthProto CHAP (0x0305C22305)
*Mar  1 04:43:37.558: BR4/0:1 LCP:    MagicNumber 0x081255F0
(0x0506081255F0)
*Mar  1 04:43:37.582: BR4/0:1 LCP: I CONFACK [REQsent] id 9 len 15
*Mar  1 04:43:37.582: BR4/0:1 LCP:    AuthProto CHAP (0x030522305)
*Mar  1 04:43:37.582: BR4/0:1 LCP:    MagicNumber 0x081255F0
(0x0506081255F0)
*Mar  1 04:43:38.734: BR4/0:1 LCP: I CONFREQ [ACKrcvd] id 1 len 50
*Mar  1 04:43:38.734: BR4/0:1 LCP:    ACCM 0x00000000 (0x020600000000)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    MagicNumber 0x4D7E7031
(0x05064D7E7031)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    PFC (0x0702)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    ACFC (0x0802)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    Callback 6  (0x0D0306)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    MRRU 1614 (0x1104064E)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    EndpointDisc 1 Local
*Mar  1 04:43:38.734: BR4/0:1 LCP:     (0x131701C78A033CF7314DCD8446E96E23)
*Mar  1 04:43:38.734: BR4/0:1 LCP:     (0x45294500000000)
*Mar  1 04:43:38.734: BR4/0:1 LCP: O CONFREJ [ACKrcvd] id 1 len 34
*Mar  1 04:43:38.734: BR4/0:1 LCP:    Callback 6  (0x0D0306)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    MRRU 1614 (0x1104064E)
*Mar  1 04:43:38.734: BR4/0:1 LCP:    EndpointDisc 1 Local
*Mar  1 04:43:38.734: BR4/0:1 LCP:     (0x131701C78A033CF7314DCD8446E96E23)
*Mar  1 04:43:38.734: BR4/0:1 LCP:     (0x45294500000000)
*Mar  1 04:43:38.766: BR4/0:1 LCP: I CONFREQ [ACKrcvd] id 2 len 20
*Mar  1 04:43:38.766: BR4/0:1 LCP:    ACCM 0x00000000 (0x020600000000)
*Mar  1 04:43:38.766: BR4/0:1 LCP:    MagicNumber 0x4D7E7031
(0x05064D7E7031)
*Mar  1 04:43:38.766: BR4/0:1 LCP:    PFC (0x0702)
*Mar  1 04:43:38.766: BR4/0:1 LCP:    ACFC (0x0802)
*Mar  1 04:43:38.766: BR4/0:1 LCP: O CONFACK [ACKrcvd] id 2 len 20
*Mar  1 04:43:38.766: BR4/0:1 LCP:    ACCM 0x00000000 (0x020600000000)
*Mar  1 04:43:38.766: BR4/0:1 LCP:    MagicNumber 0x4D7E7031
(0x05064D7E7031)
*Mar  1 04:43:38.766: BR4/0:1 LCP:    PFC (0x0702)
*Mar  1 04:43:38.766: BR4/0:1 LCP:    ACFC (0x0802)
*Mar  1 04:43:38.766: BR4/0:1 LCP: State is Open
*Mar  1 04:43:38.766: BR4/0:1 PPP: Phase is AUTHENTICATING, by this end
*Mar  1 04:43:38.766: BR4/0:1 CHAP: O CHALLENGE id 7 len 27 from "router"
*Mar  1 04:43:38.798: BR4/0:1 LCP: I IDENTIFY [Open] id 3 len 18 magic
0x4D7E7031 MSRASV5.00
*Mar  1 04:43:38.802: BR4/0:1 LCP: I IDENTIFY [Open] id 4 len 24 magic
0x4D7E7031 MSRAS-1-MIOPC
*Mar  1 04:43:38.810: BR4/0:1 CHAP: I RESPONSE id 7 len 24 from "mylogin"
*Mar  1 04:43:38.810: AAA: parse name=BRI4/0:1 idb type=14 tty=-1
*Mar  1 04:43:38.810: AAA: name=BRI4/0:1 flags=0x55 type=2 shelf=0 slot=4
adapter=0 port=0 channel=1
*Mar  1 04:43:38.810: AAA: parse name=<no string> idb type=-1 tty=-1
*Mar  1 04:43:38.810: AAA/MEMORY: create_user (0x61FF59B4) user='mylogin'
ruser='' port='BRI4/0:1' rem_addr='114037111/114030145' authen_type=CHAP
service=PPP priv=1
*Mar  1 04:43:38.810: AAA/AUTHEN/START (1060551795): port='BRI4/0:1' list=''
action=LOGIN service=PPP
*Mar  1 04:43:38.810: AAA/AUTHEN/START (1060551795): using "default" list
*Mar  1 04:43:38.810: AAA/AUTHEN (1060551795): status = UNKNOWN
*Mar  1 04:43:38.810: AAA/AUTHEN/START (1060551795): Method=radius (radius)
*Mar  1 04:43:38.814: AAA/AUTHEN (1060551795): status = PASS
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP: Authorize LCP
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP (101366615): Port='BRI4/0:1'
list='' service=NET
*Mar  1 04:43:38.814: AAA/AUTHOR/LCP: BR4/0:1 (101366615) user='mylogin'
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP (101366615): send AV
service=ppp
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP (101366615): send AV
protocol=lcp
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP (101366615): found list
"default"
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP (101366615): Method=radius
(radius)
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR (101366615): Post authorization
status = PASS_REPL
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP: Prcessing AV service=ppp
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/LCP: Processing AV routing*true
*Mar  1 04:43:38.814: BR4/0:1 CHAP: O SUCCESS id 7 len 4
*Mar  1 04:43:38.814: AAA/ACCT/NET/START User mgc, Port BRI4/0:1, List ""
*Mar  1 04:43:38.814: AAA/ACCT/NET: Found list "default"
*Mar  1 04:43:38.814: AAA/ACCT: no attribute "service" to replace, adding it
*Mar  1 04:43:38.814: AAA/ACCT/NET/START: User mylogin, Delayed 0x8
*Mar  1 04:43:38.814: AAA/ACCT/NET/START User mylogin, Port BRI4/0:1,
         task_id=7 timezone=MET service=ppp
*Mar  1 04:43:38.814: BR4/0:1 PPP: Phase is UP
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM: (0): Can we start CDPCP?
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM (4001102332): Port='BRI4/0:1'
list='' service=NET
*Mar  1 04:43:38.814: AAA/AUTHOR/FSM: BR4/0:1 (4001102332) user='mylogin'
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM (4001102332): send AV
service=ppp
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM (4001102332): send AV
protocol=cdp
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM (4001102332): found list
"default"
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM (4001102332):
Method=radius(radius)
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR (4001102332): Post authorization
status = PASS_REPL
*Mar  1 04:43:38.814: BR4/0:1 AAA/AUTHOR/FSM: We can start CDPCP
*Mar  1 04:43:38.814: BR4/0:1 CDPCP: O CONFREQ [Closed] id 7 len 4
*Mar  1 04:43:38.814: %ISDN-6-DISCONNECT: Interface BRI4/0:1  disconnected
from telefono mylogin, call lasted 3 seconds
*Mar  1 04:43:38.890: %LINK-3-UPDOWN: Interface BRI4/0:1, changed state to
down
*Mar  1 04:43:38.890: AAA/ACCT/ACCT_DISC: Found list "default"
*Mar  1 04:43:38.890: BRI4/0:1 AAA/DISC: 2/"Lost Carrier"
*Mar  1 04:43:38.890: AAA/ACCT/ACCT_DISC: Found list "default"
*Mar  1 04:43:38.890: BRI4/0:1 AAA/DISC/EXT: 1011/"Lost Carrier"
*Mar  1 04:43:38.890: BR4/0:1 CDPCP: State is Closed
*Mar  1 04:43:38.890: BR4/0:1 PPP: Phase is TERMINATING
*Mar  1 04:43:38.890: BR4/0:1 LCP: State is Closed
*Mar  1 04:43:38.890: BR4/0:1 PPP: Phase is DOWN
*Mar  1 04:43:38.890: AAA/MEMORY: free_user (0x61FF59B4) ser='mylogin'
ruser='' port='BRI4/0:1' rem_addr='114037111/114030145' authen_type=CHAP
service=PPP priv=1
*Mar  1 04:43:38.890: BR4/0:1 AAA/AUTHOR/PER-USER: Event LCP_DOWN
*Mar  1 04:43:38.890: BR4/0:1 AAA/AUTHOR: LCP_DOWN
*Mar  1 04:43:49.894: %ISDN-6-LAYER2DOWN: Layer 2 for Interface BR4/0, TEI
98 changed to down

 Perchč sui nuovi IOS la sintassi e': group radius non piu' radius


 > Perchè sui nuovi IOS la sintassi e': group radius non piu' radius
