PPPoE - Radius

Hammy · Mon Mar 20, 2006 4:44 am

I finally got freeradius to pull from MySQL. I tested it with NTRadPing. It just has the basics as I'm new to this. I loaded the updated Mikrotik reference dictionary. I have PPPoE authenticating to an internal list on the AP.

Test with NTRadPing

rad_recv: Access-Request packet from host 10.1.1.22:3472, id=25, length=49
        User-Name = "pppoetest"
        User-Password = "testpasswd"
rlm_sql (sql): Reserving sql socket id: 2
rlm_sql (sql): Released sql socket id: 2
Sending Access-Accept of id 25 to 10.1.1.22 port 3472

Test with Mikrotik

rad_recv: Access-Request packet from host 10.1.11.100:33336, id=14, length=204
        Service-Type = Framed-User
        Framed-Protocol = PPP
        NAS-Port = 3386
        NAS-Port-Type = Ethernet
        User-Name = "pppoetest"
        Calling-Station-Id = "00:0B:6B:35:AE:C1"
        Called-Station-Id = "ICS - South"
        NAS-Port-Id = "South"
        MS-CHAP-Challenge = 0xdc6526c1478fcae00a8817d866a85054
        MS-CHAP2-Response = 0x010033370c3592e969a65a956308481771ec0000000000000000f38294067252984c6c994bd66ce077ebf859c033040e27ab
        NAS-Identifier = "ICSAP1-HammettFarms1"
        NAS-IP-Address = 10.1.11.100
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql (sql): Released sql socket id: 3
rad_recv: Access-Request packet from host 10.1.11.100:33336, id=14, length=204
Sending Access-Reject of id 14 to 10.1.11.100 port 33336

Freman · Fri Mar 31, 2006 7:28 am

Try turning off ms-chap and ms-chap2 on your PPPoE interface/policy

You might not have ms-chap enabled in your freeradius.

Hammy · Fri Mar 31, 2006 7:54 am

I don't remember what I did to fix it, but this wasn't it.

Thanks, though.