topic Re: RADIUS Attribute 198 in Network Access Control

RADIUS Attribute 198

obauer — Sun, 10 Mar 2019 21:26:14 GMT

Hi there,

i am trying to get the radius attribute 198 from dial-in router (AS5300, C2610) with ios 12.3.

With "debug radius" the following output apears:

*Mar 1 01:06:02.679: RADIUS: Acct-Session-Id [44] 10 "00000009"

*Mar 1 01:06:02.679: RADIUS: Framed-Protocol [7] 6 PPP

[1]

*Mar 1 01:06:02.679: RADIUS: Framed-IP-Address [8] 6 192.168.1.1

*Mar 1 01:06:02.679: RADIUS: Vendor, Cisco [26] 35

*Mar 1 01:06:02.679: RADIUS: Cisco AVpair [1] 29 "connect-progress=L

AN Ses Up"

*Mar 1 01:06:02.679: RADIUS: Acct-Session-Time [46] 6 23

*Mar 1 01:06:02.683: RADIUS: Acct-Input-Octets [42] 6 1377

*Mar 1 01:06:02.683: RADIUS: Acct-Output-Octets [43] 6 106

*Mar 1 01:06:02.683: RADIUS: Acct-Input-Packets [47] 6 14

*Mar 1 01:06:02.683: RADIUS: Acct-Output-Packets [48] 6 7

*Mar 1 01:06:02.683: RADIUS: Acct-Terminate-Cause[49] 6 user-request

[1]

*Mar 1 01:06:02.683: RADIUS: Vendor, Cisco [26] 39

*Mar 1 01:06:02.683: RADIUS: Cisco AVpair [1] 33 "disc-cause-ext=PPP

Receive Term"

*Mar 1 01:06:02.683: RADIUS: Authentic [45] 6 RADIUS

[1]

*Mar 1 01:06:02.687: RADIUS: User-Name [1] 6 "test"

*Mar 1 01:06:02.687: RADIUS: Acct-Status-Type [40] 6 Stop

[2]

*Mar 1 01:06:02.687: RADIUS: Vendor, Cisco [26] 16

*Mar 1 01:06:02.687: RADIUS: cisco-nas-port [2] 10 "BRI0/0:1"

*Mar 1 01:06:02.687: RADIUS: NAS-Port [5] 6 30001

*Mar 1 01:06:02.687: RADIUS: Vendor, Cisco [26] 26

*Mar 1 01:06:02.687: RADIUS: Cisco AVpair [1] 20 "interface=BRI0/0:1

*Mar 1 01:06:02.687: RADIUS: NAS-Port-Type [61] 6 ISDN

[2]

*Mar 1 01:06:02.691: RADIUS: Calling-Station-Id [31] 12 "3334277535"

*Mar 1 01:06:02.691: RADIUS: Called-Station-Id [30] 8 "289981"

*Mar 1 01:06:02.691: RADIUS: Service-Type [6] 6 Framed

[2]

*Mar 1 01:06:02.691: RADIUS: NAS-IP-Address [4] 6 192.168.255.104

*Mar 1 01:06:02.691: RADIUS: Acct-Delay-Time [41] 6 0

Where is the attribute 198?

Thanks,

Oliver

Re: RADIUS Attribute 198

mheusinger — Sat, 14 Jan 2006 17:49:45 GMT

Hello,

would it be possible to post the relevant part of the config? Which Radius server is involved?

Regards, Martin

Re: RADIUS Attribute 198

obauer — Mon, 16 Jan 2006 08:37:38 GMT

Hello Martin,

here is the information:

Cisco:

...

aaa new-model

aaa group server radius hamlet

server x.x.x.x auth-port 1812 acct-port 1813

aaa group server radius dialin-user

server x.x.x.x auth-port 1812 acct-port 1813

aaa authentication login default group hamlet local

aaa authentication sgbp default local

aaa authentication ppp default group dialin-user

aaa authorization exec default group hamlet

aaa accounting network default start-stop group dialin-user

aaa session-id common

...

radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 xxx

A1507

radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 xxx

radius-server vsa send accounting

radius-server vsa send authentication

We are using FreeRadius 0.8.1.

Regards,

Oliver

Re: RADIUS Attribute 198

mheusinger — Mon, 16 Jan 2006 13:35:28 GMT

Hello Oliver,

according to "Additional Vendor-Proprietary RADIUS Attributes" at

http://www.cisco.com/en/US/products/sw/iosswrel/ps1826/products_feature_guide09186a0080080efc.html

there should be additionally

radius-server host x.x.x.x non-standard

in the config to inform the router, that other attributes will be used as well.

for a commad syntax in IOS 12.0

Hope this helps!

Regards, Martin