[RadiusNT] Can't get 3com VSA IES_NEXT_HOP_GATEWAY to work

Kelly Peterson ( netadmin@compusmart.ab.ca )
Fri, 13 Aug 1999 14:37:40 -0600

We are using RadiusNT version 2.5.124 and our HiperARCs are running version
4.1.59-6 firmware. I have added the following line to the dictionary file:

ATTRIBUTE IES-Next-Hop-Gateway 36872 ipaddr

And have created a user that looks like this in our users file:

xstoptest Password="test",
User-Service-Type=Framed-User,

Framed-Protocol=PPP,
Framed-Address=255.255.255.254,

Framed-Netmask=255.255.255.255,
Idle-Timeout=1800,
Port-Limit=1,

IES-Next-Hop-Gateway=199.185.130.185,
Session-Timeout=36000,

On the HiperARC I have enabled the SEND_UNSOLICITED_ARP feature.

I called 3com and they say that our radius server is not sending the VSA
correctly to the HiperARC. Below is the output on monitor radius for the
xstoptest user in hex. Any help would be appreciated!

Thanks.


---------------------------------------------------------------------
Source-IP Src-Port Destination-IP Dest-Port Id Packet-Type
---------------------------------------------------------------------
199.185.130.162 1645 199.185.131.5 1645 243 Access-Request
---------------------------------------------------------------------
01 f3 00 9b 0f f0 a7 3c 43 25 59 6b 42 68 1f ce | <C%YkBh |
33 82 a4 d5 01 0b 78 73 74 6f 70 74 65 73 74 02 |3 xstoptest |
12 00 9a b1 72 67 a1 80 4c cd ab 21 09 26 32 d6 | rg L ! &2 |
73 04 06 c7 b9 82 a2 05 06 00 00 03 13 2c 0a 35 |s , 5|
31 35 31 31 33 36 37 1a 0e 00 00 01 ad 00 00 98 |1511367 |
43 00 00 07 fb 06 06 00 00 00 02 07 06 00 00 00 |C |
01 1a 0e 00 00 01 ad 00 00 90 19 00 00 00 04 1a | |
0e 00 00 01 ad 00 00 90 1a 00 00 00 01 1a 0e 00 | |
00 01 ad 00 00 90 1b 00 00 00 13 1f 02 1e 02 3d | =|
06 00 00 00 00 08 06 cf 22 47 94 | "G |


---------------------------------------------------------------------
Source-IP Src-Port Destination-IP Dest-Port Id Packet-Type
---------------------------------------------------------------------
199.185.131.5 1645 199.185.130.162 1645 243 Access-Accept
---------------------------------------------------------------------
02 f3 00 44 74 8b 8b 04 80 91 f4 91 35 e8 73 be | Dt 5 s |
0d 35 95 37 06 06 00 00 00 02 07 06 00 00 00 01 | 5 7 |
08 06 ff ff ff fe 09 06 ff ff ff ff 1c 06 00 00 | |
07 08 3e 06 00 00 00 01 08 06 c7 b9 82 b9 1b 06 | > |
00 00 8c a0 | |

For more information about this list (including removal) go to:
http://www.iea-software.com/support/maillists/liststart