Re: [RadiusNT] Proxy Question

Dale E. Reed Jr. ( (no email) )
Thu, 11 May 2000 11:16:58 -0700

Greg Lowthian wrote:
>
> RadiusNT 2.5
> We are testing managed modems and have a problem with Proxy State. When we
> proxy a request to another Radius server we send Proxy State and receive it
> back but it is not sent back to the managed modems. See the below Ack
>
> Sending proxy request to: simple:???.???.???.???:??????:101
> Resp Time: 120 Auth: 11/0 -> 12 Acct: 0/0/0 -> 0
>
> radrecv: Request from host d1847606 code=2, id=1, length=75
> User-Service = Framed-User
> Framed-Protocol = PPP
> Framed-Address = 255.255.255.254
> Framed-Netmask = 255.255.255.255
> Framed-Routing = None
> Framed-Compression = Van-Jacobsen-TCP-IP
> Framed-MTU = 1500
> Proxy-State = ""
> Proxy-State = "926035069"
> Sending Ack of id 1 to 4042c01e
> User-Service = Framed-User
> Framed-Protocol = PPP
> Framed-Address = 255.255.255.254
> Framed-Netmask = 255.255.255.255
> Framed-Routing = None
> Framed-Compression = Van-Jacobsen-TCP-IP
> Framed-MTU = 1500
> Resp Time: 131 Auth: 12/0 -> 12 Acct: 0/0/0 -> 0

RadiusNT's Proxy-State to d1847606 was "926035069". However, since
you filtered quite a bit out here, I can't really tell whats
going on. For Example, the request that we received originally
is not included above (its the one above the "sending proxy request..."
line. What was that request and did it include a Proxy-State? Was it
the Blank Proxy-State listed after the Framed-MTU? I'm guessing
RadiusNT will not return a blank Proxy-State, since thats against the
RFC spec (ie, data segment can't be 0 length). We never return our
own Proxy-State, as we are required to remove it from the response
before sending back to who we received it from.

-- 

Dale E. Reed Jr. Emerald and RadiusNT/X__________________________________________IEA Software, Inc. www.iea-software.com

For more information about this list (including removal) go to:http://www.iea-software.com/support/maillists/liststart