Re: SSL VPN using wrong RADIUS server

tyler.perkey · ‎11-07-2022

Hi All,

We've had an issue were recently we cannot connect to SSL VPN due to failed login attempts. We have 2 RADIUS servers we use, 1 for 2FA authentication (Duo-RADIUS) and 1 for management access (PNLRADIUS). I ran debugs while trying to log into RADIUS and what I'm seeing is the ASA querying the management RADIUS server in addition to the proper VPN RADIUS server. The group policy for VPN only references the Duo-RADIUS server so I'm not sure why it's also trying to contact the management server.

DEBUG Log:

asa/pri/act# debug radius
asa/pri/act# radius mkreq: 0xe
alloc_rip 0x00002aaac34c5228
new request 0xe --> 11 (0x00002aaac34c5228)
got user 'tylerperkey'
got password
add_req 0x00002aaac34c5228 session 0xe id 11
RADIUS_REQUEST
radius.c: rad_mkpkt
rad_mkpkt: ip:source-ip=CLIENT-PUBLIC-IP

RADIUS packet decode (authentication request)

--------------------------------------
Raw packet data (length = 632).....
01 0b 02 78 30 c7 0e ed 3f 19 9d 9c bc 23 34 e9 | ...x0...?....#4.
82 3e 07 bf 01 0d 74 79 6c 65 72 70 65 72 6b 65 | .>....tylerperke
79 02 12 49 f0 14 c6 da 2c 2c f1 7f 10 39 20 42 | y..I....,,.9 B
09 9a 48 05 06 0c 0b d0 00 1e 0d 36 37 2e 32 31 | ..H........67.21
32 2e 31 31 2e 36 1f 0e 36 34 2e 32 35 32 2e 35 | 2.11.6..64.252.5
32 2e 37 30 3d 06 00 00 00 05 42 0e 36 34 2e 32 | 2.70=.....B.64.2
35 32 2e 35 32 2e 37 30 1a 23 00 00 00 09 01 1d | 52.52.70.#......
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e 1a 2c 00 00 00 | latform=win.,...
09 01 26 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 | ..&mdm-tlv=devic
65 2d 6d 61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 | e-mac=00-0c-29-c
64 2d 64 34 2d 30 34 1a 32 00 00 00 09 01 2c 6d | d-d4-04.2.....,m
64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 79 | dm-tlv=device-ty
70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e 20 | pe=VMware, Inc.
56 4d 77 61 72 65 37 2c 31 1a 33 00 00 00 09 01 | VMware7,1.3.....
2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d | -mdm-tlv=device-
70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e | platform-version
3d 31 30 2e 30 2e 31 39 30 34 34 20 1a 33 00 00 | =10.0.19044 .3..
00 09 01 2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 | ...-mdm-tlv=devi
63 65 2d 70 75 62 6c 69 63 2d 6d 61 63 3d 30 30 | ce-public-mac=00
2d 30 63 2d 32 39 2d 63 64 2d 64 34 2d 30 34 1a | -0c-29-cd-d4-04.
3b 00 00 00 09 01 35 6d 64 6d 2d 74 6c 76 3d 61 | ;.....5mdm-tlv=a
63 2d 75 73 65 72 2d 61 67 65 6e 74 3d 41 6e 79 | c-user-agent=Any
43 6f 6e 6e 65 63 74 20 57 69 6e 64 6f 77 73 20 | Connect Windows
34 2e 31 30 2e 30 35 31 31 31 1a 5b 00 00 00 09 | 4.10.05111.[....
01 55 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 | .Umdm-tlv=device
2d 75 69 64 3d 45 43 32 33 37 41 44 31 43 32 42 | -uid=EC237AD1C2B
46 41 35 39 35 37 45 31 45 30 43 35 46 43 32 32 | FA5957E1E0C5FC22
39 43 30 38 35 45 39 45 39 30 42 32 39 38 43 45 | 9C085E9E90B298CE
37 41 43 41 35 41 33 38 33 30 37 36 35 30 33 43 | 7ACA5A383076503C
30 36 41 33 33 04 06 43 d4 0b 11 1a 31 00 00 00 | 06A33..C....1...
09 01 2b 61 75 64 69 74 2d 73 65 73 73 69 6f 6e | ..+audit-session
2d 69 64 3d 34 33 64 34 30 62 31 31 30 63 30 62 | -id=43d40b110c0b
64 30 30 30 36 33 36 39 39 33 31 34 1a 21 00 00 | d00063699314.!..
00 09 01 1b 69 70 3a 73 6f 75 72 63 65 2d 69 70 | ....ip:source-ip
3d 36 34 2e 32 35 32 2e 35 32 2e 37 30 1a 1a 00 | =CLIENT-PUBLIC-IP...
00 0c 04 92 14 44 65 66 61 75 6c 74 57 45 42 56 | .....DefaultWEBV
50 4e 47 72 6f 75 70 1a 0c 00 00 0c 04 96 06 00 | PNGroup.........
00 00 02 1a 15 00 00 00 09 01 0f 63 6f 61 2d 70 | ...........coa-p
75 73 68 3d 74 72 75 65 | ush=true

Parsed packet data.....
Radius: Code = 1 (0x01)
Radius: Identifier = 11 (0x0B)
Radius: Length = 632 (0x0278)
Radius: Vector: 30C70EED3F199D9CBC2334E9823E07BF
Radius: Type = 1 (0x01) User-Name
Radius: Length = 13 (0x0D)
Radius: Value (String) =
74 79 6c 65 72 70 65 72 6b 65 79 | tylerperkey
Radius: Type = 2 (0x02) User-Password
Radius: Length = 18 (0x12)
Radius: Value (String) =
49 f0 14 c6 da 2c 2c f1 7f 10 39 20 42 09 9a 48 | I....,,.9 B..H
Radius: Type = 5 (0x05) NAS-Port
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0xC0BD000
Radius: Type = 30 (0x1E) Called-Station-Id
Radius: Length = 13 (0x0D)
Radius: Value (String) =
36 37 2e 32 31 32 2e 31 31 2e 36 | ASA-OUTSIDE-IP
Radius: Type = 31 (0x1F) Calling-Station-Id
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 61 (0x3D) NAS-Port-Type
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0x5
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 35 (0x23)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 29 (0x1D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e | latform=win
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 44 (0x2C)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 38 (0x26)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 6d | mdm-tlv=device-m
61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 64 2d 64 | ac=00-0c-29-cd-d
34 2d 30 34 | 4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 50 (0x32)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 44 (0x2C)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 | mdm-tlv=device-t
79 70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e | ype=VMware, Inc.
20 56 4d 77 61 72 65 37 2c 31 | VMware7,1
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d | latform-version=
31 30 2e 30 2e 31 39 30 34 34 20 | 10.0.19044
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
75 62 6c 69 63 2d 6d 61 63 3d 30 30 2d 30 63 2d | ublic-mac=00-0c-
32 39 2d 63 64 2d 64 34 2d 30 34 | 29-cd-d4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 59 (0x3B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 53 (0x35)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 61 63 2d 75 73 65 72 2d | mdm-tlv=ac-user-
61 67 65 6e 74 3d 41 6e 79 43 6f 6e 6e 65 63 74 | agent=AnyConnect
20 57 69 6e 64 6f 77 73 20 34 2e 31 30 2e 30 35 | Windows 4.10.05
31 31 31 | 111
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 91 (0x5B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 85 (0x55)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 75 | mdm-tlv=device-u
69 64 3d 45 43 32 33 37 41 44 31 43 32 42 46 41 | id=EC237AD1C2BFA
35 39 35 37 45 31 45 30 43 35 46 43 32 32 39 43 | 5957E1E0C5FC229C
30 38 35 45 39 45 39 30 42 32 39 38 43 45 37 41 | 085E9E90B298CE7A
43 41 35 41 33 38 33 30 37 36 35 30 33 43 30 36 | CA5A383076503C06
41 33 33 | A33
Radius: Type = 4 (0x04) NAS-IP-Address
Radius: Length = 6 (0x06)
Radius: Value (IP Address) = ASA-INSIDE-IP (0x43D40B11)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 49 (0x31)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 43 (0x2B)
Radius: Value (String) =
61 75 64 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 | audit-session-id
3d 34 33 64 34 30 62 31 31 30 63 30 62 64 30 30 | =43d40b110c0bd00
30 36 33 36 39 39 33 31 34 | 063699314
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 33 (0x21)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 27 (0x1B)
Radius: Value (String) =
69 70 3a 73 6f 75 72 63 65 2d 69 70 3d 36 34 2e | ip:source-ip=64.
32 35 32 2e 35 32 2e 37 30 | 252.52.70
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 26 (0x1A)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 146 (0x92) Tunnel-Group-Name
Radius: Length = 20 (0x14)
Radius: Value (String) =
44 65 66 61 75 6c 74 57 45 42 56 50 4e 47 72 6f | DefaultWEBVPNGro
75 70 | up
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 12 (0x0C)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 150 (0x96) Client-Type
Radius: Length = 6 (0x06)
Radius: Value (Integer) = 2 (0x0002)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 21 (0x15)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 15 (0x0F)
Radius: Value (String) =
63 6f 61 2d 70 75 73 68 3d 74 72 75 65 | coa-push=true
send pkt 10.50.10.10/1812
radius.c: rad_mkpkt
rad_mkpkt: ip:source-ip=CLIENT-PUBLIC-IP

RADIUS packet decode (authentication request (retransmission))

--------------------------------------
Raw packet data (length = 632).....
01 0b 02 78 30 c7 0e ed 3f 19 9d 9c bc 23 34 e9 | ...x0...?....#4.
82 3e 07 bf 01 0d 74 79 6c 65 72 70 65 72 6b 65 | .>....tylerperke
79 02 12 49 f0 14 c6 da 2c 2c f1 7f 10 39 20 42 | y..I....,,.9 B
09 9a 48 05 06 0c 0b d0 00 1e 0d 36 37 2e 32 31 | ..H........67.21
32 2e 31 31 2e 36 1f 0e 36 34 2e 32 35 32 2e 35 | 2.11.6..64.252.5
32 2e 37 30 3d 06 00 00 00 05 42 0e 36 34 2e 32 | 2.70=.....B.64.2
35 32 2e 35 32 2e 37 30 1a 23 00 00 00 09 01 1d | 52.52.70.#......
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e 1a 2c 00 00 00 | latform=win.,...
09 01 26 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 | ..&mdm-tlv=devic
65 2d 6d 61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 | e-mac=00-0c-29-c
64 2d 64 34 2d 30 34 1a 32 00 00 00 09 01 2c 6d | d-d4-04.2.....,m
64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 79 | dm-tlv=device-ty
70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e 20 | pe=VMware, Inc.
56 4d 77 61 72 65 37 2c 31 1a 33 00 00 00 09 01 | VMware7,1.3.....
2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d | -mdm-tlv=device-
70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e | platform-version
3d 31 30 2e 30 2e 31 39 30 34 34 20 1a 33 00 00 | =10.0.19044 .3..
00 09 01 2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 | ...-mdm-tlv=devi
63 65 2d 70 75 62 6c 69 63 2d 6d 61 63 3d 30 30 | ce-public-mac=00
2d 30 63 2d 32 39 2d 63 64 2d 64 34 2d 30 34 1a | -0c-29-cd-d4-04.
3b 00 00 00 09 01 35 6d 64 6d 2d 74 6c 76 3d 61 | ;.....5mdm-tlv=a
63 2d 75 73 65 72 2d 61 67 65 6e 74 3d 41 6e 79 | c-user-agent=Any
43 6f 6e 6e 65 63 74 20 57 69 6e 64 6f 77 73 20 | Connect Windows
34 2e 31 30 2e 30 35 31 31 31 1a 5b 00 00 00 09 | 4.10.05111.[....
01 55 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 | .Umdm-tlv=device
2d 75 69 64 3d 45 43 32 33 37 41 44 31 43 32 42 | -uid=EC237AD1C2B
46 41 35 39 35 37 45 31 45 30 43 35 46 43 32 32 | FA5957E1E0C5FC22
39 43 30 38 35 45 39 45 39 30 42 32 39 38 43 45 | 9C085E9E90B298CE
37 41 43 41 35 41 33 38 33 30 37 36 35 30 33 43 | 7ACA5A383076503C
30 36 41 33 33 04 06 43 d4 0b 11 1a 31 00 00 00 | 06A33..C....1...
09 01 2b 61 75 64 69 74 2d 73 65 73 73 69 6f 6e | ..+audit-session
2d 69 64 3d 34 33 64 34 30 62 31 31 30 63 30 62 | -id=43d40b110c0b
64 30 30 30 36 33 36 39 39 33 31 34 1a 21 00 00 | d00063699314.!..
00 09 01 1b 69 70 3a 73 6f 75 72 63 65 2d 69 70 | ....ip:source-ip
3d 36 34 2e 32 35 32 2e 35 32 2e 37 30 1a 1a 00 | =CLIENT-PUBLIC-IP...
00 0c 04 92 14 44 65 66 61 75 6c 74 57 45 42 56 | .....DefaultWEBV
50 4e 47 72 6f 75 70 1a 0c 00 00 0c 04 96 06 00 | PNGroup.........
00 00 02 1a 15 00 00 00 09 01 0f 63 6f 61 2d 70 | ...........coa-p
75 73 68 3d 74 72 75 65 | ush=true

Parsed packet data.....
Radius: Code = 1 (0x01)
Radius: Identifier = 11 (0x0B)
Radius: Length = 632 (0x0278)
Radius: Vector: 30C70EED3F199D9CBC2334E9823E07BF
Radius: Type = 1 (0x01) User-Name
Radius: Length = 13 (0x0D)
Radius: Value (String) =
74 79 6c 65 72 70 65 72 6b 65 79 | tylerperkey
Radius: Type = 2 (0x02) User-Password
Radius: Length = 18 (0x12)
Radius: Value (String) =
49 f0 14 c6 da 2c 2c f1 7f 10 39 20 42 09 9a 48 | I....,,.9 B..H
Radius: Type = 5 (0x05) NAS-Port
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0xC0BD000
Radius: Type = 30 (0x1E) Called-Station-Id
Radius: Length = 13 (0x0D)
Radius: Value (String) =
36 37 2e 32 31 32 2e 31 31 2e 36 | ASA-OUTSIDE-IP
Radius: Type = 31 (0x1F) Calling-Station-Id
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 61 (0x3D) NAS-Port-Type
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0x5
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 35 (0x23)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 29 (0x1D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e | latform=win
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 44 (0x2C)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 38 (0x26)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 6d | mdm-tlv=device-m
61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 64 2d 64 | ac=00-0c-29-cd-d
34 2d 30 34 | 4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 50 (0x32)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 44 (0x2C)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 | mdm-tlv=device-t
79 70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e | ype=VMware, Inc.
20 56 4d 77 61 72 65 37 2c 31 | VMware7,1
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d | latform-version=
31 30 2e 30 2e 31 39 30 34 34 20 | 10.0.19044
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
75 62 6c 69 63 2d 6d 61 63 3d 30 30 2d 30 63 2d | ublic-mac=00-0c-
32 39 2d 63 64 2d 64 34 2d 30 34 | 29-cd-d4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 59 (0x3B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 53 (0x35)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 61 63 2d 75 73 65 72 2d | mdm-tlv=ac-user-
61 67 65 6e 74 3d 41 6e 79 43 6f 6e 6e 65 63 74 | agent=AnyConnect
20 57 69 6e 64 6f 77 73 20 34 2e 31 30 2e 30 35 | Windows 4.10.05
31 31 31 | 111
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 91 (0x5B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 85 (0x55)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 75 | mdm-tlv=device-u
69 64 3d 45 43 32 33 37 41 44 31 43 32 42 46 41 | id=EC237AD1C2BFA
35 39 35 37 45 31 45 30 43 35 46 43 32 32 39 43 | 5957E1E0C5FC229C
30 38 35 45 39 45 39 30 42 32 39 38 43 45 37 41 | 085E9E90B298CE7A
43 41 35 41 33 38 33 30 37 36 35 30 33 43 30 36 | CA5A383076503C06
41 33 33 | A33
Radius: Type = 4 (0x04) NAS-IP-Address
Radius: Length = 6 (0x06)
Radius: Value (IP Address) = ASA-INSIDE-IP (0x43D40B11)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 49 (0x31)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 43 (0x2B)
Radius: Value (String) =
61 75 64 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 | audit-session-id
3d 34 33 64 34 30 62 31 31 30 63 30 62 64 30 30 | =43d40b110c0bd00
30 36 33 36 39 39 33 31 34 | 063699314
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 33 (0x21)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 27 (0x1B)
Radius: Value (String) =
69 70 3a 73 6f 75 72 63 65 2d 69 70 3d 36 34 2e | ip:source-ip=64.
32 35 32 2e 35 32 2e 37 30 | 252.52.70
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 26 (0x1A)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 146 (0x92) Tunnel-Group-Name
Radius: Length = 20 (0x14)
Radius: Value (String) =
44 65 66 61 75 6c 74 57 45 42 56 50 4e 47 72 6f | DefaultWEBVPNGro
75 70 | up
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 12 (0x0C)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 150 (0x96) Client-Type
Radius: Length = 6 (0x06)
Radius: Value (Integer) = 2 (0x0002)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 21 (0x15)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 15 (0x0F)
Radius: Value (String) =
63 6f 61 2d 70 75 73 68 3d 74 72 75 65 | coa-push=true
send pkt 10.50.10.10/1812
rip 0x00002aaac34c5228 state 7 id 11
rad_vrfy() : response message verified
rip 0x00002aaac34c5228
: chall_state ''
: state 0x7
: reqauth:
30 c7 0e ed 3f 19 9d 9c bc 23 34 e9 82 3e 07 bf
: info 0x00002aaac34c5368
session_id 0xe
request_id 0xb
user 'tylerperkey'
response '***'
app 0
reason 0
skey 'cO2UPp&b89&t'
sip 10.50.10.10
type 1

RADIUS packet decode (response)

--------------------------------------
Raw packet data (length = 66).....
02 0b 00 42 f9 d7 76 b1 0e 3b ca 96 1e 86 76 28 | ...B..v..;....v(
83 96 a5 04 12 1c 53 75 63 63 65 73 73 2e 20 4c | ......Success. L
6f 67 67 69 6e 67 20 79 6f 75 20 69 6e 2e 2e 2e | ogging you in...
50 12 f1 6d a9 15 9c 90 d9 84 05 ca a8 c4 0f 70 | P..m...........p
d0 ed | ..

Parsed packet data.....
Radius: Code = 2 (0x02)
Radius: Identifier = 11 (0x0B)
Radius: Length = 66 (0x0042)
Radius: Vector: F9D776B10E3BCA961E8676288396A504
Radius: Type = 18 (0x12) Reply-Message
Radius: Length = 28 (0x1C)
Radius: Value (String) =
53 75 63 63 65 73 73 2e 20 4c 6f 67 67 69 6e 67 | Success. Logging
20 79 6f 75 20 69 6e 2e 2e 2e | you in...
Radius: Type = 80 (0x50) Message-Authenticator
Radius: Length = 18 (0x12)
Radius: Value (String) =
f1 6d a9 15 9c 90 d9 84 05 ca a8 c4 0f 70 d0 ed | .m...........p..
rad_procpkt: ACCEPT
RADIUS_ACCESS_ACCEPT: normal termination
radius mkreq: 0xf
alloc_rip 0x00002aaac34c4980
new request 0xf --> 12 (0x00002aaac34c4980)
got user 'tylerperkey'
got password
add_req 0x00002aaac34c4980 session 0xf id 12
RADIUS_DELETE
remove_req 0x00002aaac34c5228 session 0xe id 11
free_rip 0x00002aaac34c5228
RADIUS_REQUEST
radius.c: rad_mkpkt
rad_mkpkt: ip:source-ip=CLIENT-PUBLIC-IP

RADIUS packet decode (authentication request)

--------------------------------------
Raw packet data (length = 696).....
01 0c 02 b8 dd e7 d2 2a bb 5f de da 2f 1a 9a 19 | .......*._../...
c1 9f e2 07 01 0d 74 79 6c 65 72 70 65 72 6b 65 | ......tylerperke
79 05 06 0c 0b d0 00 1e 0d 36 37 2e 32 31 32 2e | y........67.212.
31 31 2e 36 1f 0e 36 34 2e 32 35 32 2e 35 32 2e | 11.6..64.252.52.
37 30 3d 06 00 00 00 05 42 0e 36 34 2e 32 35 32 | 70=.....B.64.252
2e 35 32 2e 37 30 1a 18 00 00 01 37 0b 12 9c 5a | .52.70.....7...Z
8c 07 6f b9 d1 9b 71 2c 5f 79 5a cc 5e 9a 1a 3a | ..o...q,_yZ.^..:
00 00 01 37 19 34 00 00 fd 6e fd 36 02 6f 9a 5f | ...7.4...n.6.o._
bc 40 cb cb 8c 95 96 6c 00 00 00 00 00 00 00 00 | .@.....l........
b2 8a 0c ae 67 33 0d e0 cd eb a4 89 fa 76 0c 1c | ....g3.......v..
37 59 df e9 e6 15 59 c3 1a 23 00 00 00 09 01 1d | 7Y....Y..#......
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e 1a 2c 00 00 00 | latform=win.,...
09 01 26 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 | ..&mdm-tlv=devic
65 2d 6d 61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 | e-mac=00-0c-29-c
64 2d 64 34 2d 30 34 1a 32 00 00 00 09 01 2c 6d | d-d4-04.2.....,m
64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 79 | dm-tlv=device-ty
70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e 20 | pe=VMware, Inc.
56 4d 77 61 72 65 37 2c 31 1a 33 00 00 00 09 01 | VMware7,1.3.....
2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d | -mdm-tlv=device-
70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e | platform-version
3d 31 30 2e 30 2e 31 39 30 34 34 20 1a 33 00 00 | =10.0.19044 .3..
00 09 01 2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 | ...-mdm-tlv=devi
63 65 2d 70 75 62 6c 69 63 2d 6d 61 63 3d 30 30 | ce-public-mac=00
2d 30 63 2d 32 39 2d 63 64 2d 64 34 2d 30 34 1a | -0c-29-cd-d4-04.
3b 00 00 00 09 01 35 6d 64 6d 2d 74 6c 76 3d 61 | ;.....5mdm-tlv=a
63 2d 75 73 65 72 2d 61 67 65 6e 74 3d 41 6e 79 | c-user-agent=Any
43 6f 6e 6e 65 63 74 20 57 69 6e 64 6f 77 73 20 | Connect Windows
34 2e 31 30 2e 30 35 31 31 31 1a 5b 00 00 00 09 | 4.10.05111.[....
01 55 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 | .Umdm-tlv=device
2d 75 69 64 3d 45 43 32 33 37 41 44 31 43 32 42 | -uid=EC237AD1C2B
46 41 35 39 35 37 45 31 45 30 43 35 46 43 32 32 | FA5957E1E0C5FC22
39 43 30 38 35 45 39 45 39 30 42 32 39 38 43 45 | 9C085E9E90B298CE
37 41 43 41 35 41 33 38 33 30 37 36 35 30 33 43 | 7ACA5A383076503C
30 36 41 33 33 04 06 43 d4 0b 11 1a 31 00 00 00 | 06A33..C....1...
09 01 2b 61 75 64 69 74 2d 73 65 73 73 69 6f 6e | ..+audit-session
2d 69 64 3d 34 33 64 34 30 62 31 31 30 63 30 62 | -id=43d40b110c0b
64 30 30 30 36 33 36 39 39 33 31 34 1a 21 00 00 | d00063699314.!..
00 09 01 1b 69 70 3a 73 6f 75 72 63 65 2d 69 70 | ....ip:source-ip
3d 36 34 2e 32 35 32 2e 35 32 2e 37 30 1a 1a 00 | =CLIENT-PUBLIC-IP...
00 0c 04 92 14 44 65 66 61 75 6c 74 57 45 42 56 | .....DefaultWEBV
50 4e 47 72 6f 75 70 1a 0c 00 00 0c 04 96 06 00 | PNGroup.........
00 00 02 1a 15 00 00 00 09 01 0f 63 6f 61 2d 70 | ...........coa-p
75 73 68 3d 74 72 75 65 | ush=true

Parsed packet data.....
Radius: Code = 1 (0x01)
Radius: Identifier = 12 (0x0C)
Radius: Length = 696 (0x02B8)
Radius: Vector: DDE7D22ABB5FDEDA2F1A9A19C19FE207
Radius: Type = 1 (0x01) User-Name
Radius: Length = 13 (0x0D)
Radius: Value (String) =
74 79 6c 65 72 70 65 72 6b 65 79 | tylerperkey
Radius: Type = 5 (0x05) NAS-Port
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0xC0BD000
Radius: Type = 30 (0x1E) Called-Station-Id
Radius: Length = 13 (0x0D)
Radius: Value (String) =
36 37 2e 32 31 32 2e 31 31 2e 36 | ASA-OUTSIDE-IP
Radius: Type = 31 (0x1F) Calling-Station-Id
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 61 (0x3D) NAS-Port-Type
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0x5
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 24 (0x18)
Radius: Vendor ID = 311 (0x00000137)
Radius: Type = 11 (0x0B) MS-CHAP-Challenge
Radius: Length = 18 (0x12)
Radius: Value (String) =
9c 5a 8c 07 6f b9 d1 9b 71 2c 5f 79 5a cc 5e 9a | .Z..o...q,_yZ.^.
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 58 (0x3A)
Radius: Vendor ID = 311 (0x00000137)
Radius: Type = 25 (0x19) MS-CHAP2-Response
Radius: Length = 52 (0x34)
Radius: Value (String) =
00 00 fd 6e fd 36 02 6f 9a 5f bc 40 cb cb 8c 95 | ...n.6.o._.@....
96 6c 00 00 00 00 00 00 00 00 b2 8a 0c ae 67 33 | .l............g3
0d e0 cd eb a4 89 fa 76 0c 1c 37 59 df e9 e6 15 | .......v..7Y....
59 c3 | Y.
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 35 (0x23)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 29 (0x1D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e | latform=win
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 44 (0x2C)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 38 (0x26)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 6d | mdm-tlv=device-m
61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 64 2d 64 | ac=00-0c-29-cd-d
34 2d 30 34 | 4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 50 (0x32)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 44 (0x2C)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 | mdm-tlv=device-t
79 70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e | ype=VMware, Inc.
20 56 4d 77 61 72 65 37 2c 31 | VMware7,1
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d | latform-version=
31 30 2e 30 2e 31 39 30 34 34 20 | 10.0.19044
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
75 62 6c 69 63 2d 6d 61 63 3d 30 30 2d 30 63 2d | ublic-mac=00-0c-
32 39 2d 63 64 2d 64 34 2d 30 34 | 29-cd-d4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 59 (0x3B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 53 (0x35)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 61 63 2d 75 73 65 72 2d | mdm-tlv=ac-user-
61 67 65 6e 74 3d 41 6e 79 43 6f 6e 6e 65 63 74 | agent=AnyConnect
20 57 69 6e 64 6f 77 73 20 34 2e 31 30 2e 30 35 | Windows 4.10.05
31 31 31 | 111
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 91 (0x5B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 85 (0x55)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 75 | mdm-tlv=device-u
69 64 3d 45 43 32 33 37 41 44 31 43 32 42 46 41 | id=EC237AD1C2BFA
35 39 35 37 45 31 45 30 43 35 46 43 32 32 39 43 | 5957E1E0C5FC229C
30 38 35 45 39 45 39 30 42 32 39 38 43 45 37 41 | 085E9E90B298CE7A
43 41 35 41 33 38 33 30 37 36 35 30 33 43 30 36 | CA5A383076503C06
41 33 33 | A33
Radius: Type = 4 (0x04) NAS-IP-Address
Radius: Length = 6 (0x06)
Radius: Value (IP Address) = ASA-INSIDE-IP (0x43D40B11)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 49 (0x31)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 43 (0x2B)
Radius: Value (String) =
61 75 64 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 | audit-session-id
3d 34 33 64 34 30 62 31 31 30 63 30 62 64 30 30 | =43d40b110c0bd00
30 36 33 36 39 39 33 31 34 | 063699314
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 33 (0x21)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 27 (0x1B)
Radius: Value (String) =
69 70 3a 73 6f 75 72 63 65 2d 69 70 3d 36 34 2e | ip:source-ip=64.
32 35 32 2e 35 32 2e 37 30 | 252.52.70
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 26 (0x1A)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 146 (0x92) Tunnel-Group-Name
Radius: Length = 20 (0x14)
Radius: Value (String) =
44 65 66 61 75 6c 74 57 45 42 56 50 4e 47 72 6f | DefaultWEBVPNGro
75 70 | up
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 12 (0x0C)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 150 (0x96) Client-Type
Radius: Length = 6 (0x06)
Radius: Value (Integer) = 2 (0x0002)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 21 (0x15)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 15 (0x0F)
Radius: Value (String) =
63 6f 61 2d 70 75 73 68 3d 74 72 75 65 | coa-push=true
send pkt 10.50.99.11/1645
RADIUS_SENT:server response timeout
radius mkreq: 0x10
alloc_rip 0x00002aaac34c5228
new request 0x10 --> 13 (0x00002aaac34c5228)
got user 'tylerperkey'
got password
add_req 0x00002aaac34c5228 session 0x10 id 13
RADIUS_DELETE
remove_req 0x00002aaac34c4980 session 0xf id 12
free_rip 0x00002aaac34c4980
RADIUS_REQUEST
radius.c: rad_mkpkt
rad_mkpkt: ip:source-ip=CLIENT-PUBLIC-IP

RADIUS packet decode (authentication request)

--------------------------------------
Raw packet data (length = 696).....
01 0d 02 b8 aa f3 e3 bc 1d 3f 3e 95 bc 37 25 2f | .........?>..7%/
c1 c9 f3 5f 01 0d 74 79 6c 65 72 70 65 72 6b 65 | ..._..tylerperke
79 05 06 0c 0b d0 00 1e 0d 36 37 2e 32 31 32 2e | y........67.212.
31 31 2e 36 1f 0e 36 34 2e 32 35 32 2e 35 32 2e | 11.6..64.252.52.
37 30 3d 06 00 00 00 05 42 0e 36 34 2e 32 35 32 | 70=.....B.64.252
2e 35 32 2e 37 30 1a 18 00 00 01 37 0b 12 e4 0b | .52.70.....7....
3a 9d 0e 3a a7 f7 35 e6 41 61 6d 7a c7 45 1a 3a | :..:..5.Aamz.E.:
00 00 01 37 19 34 00 00 55 0e e4 1e c6 96 64 bd | ...7.4..U.....d.
15 2e 94 f2 4d 4e ad 87 00 00 00 00 00 00 00 00 | ....MN..........
3b 0c 21 24 9c 62 1d 36 f9 e6 a3 5f 2e 56 27 01 | ;.!$.b.6..._.V'.
92 ec a5 49 00 66 48 11 1a 23 00 00 00 09 01 1d | ...I.fH..#......
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e 1a 2c 00 00 00 | latform=win.,...
09 01 26 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 | ..&mdm-tlv=devic
65 2d 6d 61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 | e-mac=00-0c-29-c
64 2d 64 34 2d 30 34 1a 32 00 00 00 09 01 2c 6d | d-d4-04.2.....,m
64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 79 | dm-tlv=device-ty
70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e 20 | pe=VMware, Inc.
56 4d 77 61 72 65 37 2c 31 1a 33 00 00 00 09 01 | VMware7,1.3.....
2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d | -mdm-tlv=device-
70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e | platform-version
3d 31 30 2e 30 2e 31 39 30 34 34 20 1a 33 00 00 | =10.0.19044 .3..
00 09 01 2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 | ...-mdm-tlv=devi
63 65 2d 70 75 62 6c 69 63 2d 6d 61 63 3d 30 30 | ce-public-mac=00
2d 30 63 2d 32 39 2d 63 64 2d 64 34 2d 30 34 1a | -0c-29-cd-d4-04.
3b 00 00 00 09 01 35 6d 64 6d 2d 74 6c 76 3d 61 | ;.....5mdm-tlv=a
63 2d 75 73 65 72 2d 61 67 65 6e 74 3d 41 6e 79 | c-user-agent=Any
43 6f 6e 6e 65 63 74 20 57 69 6e 64 6f 77 73 20 | Connect Windows
34 2e 31 30 2e 30 35 31 31 31 1a 5b 00 00 00 09 | 4.10.05111.[....
01 55 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 | .Umdm-tlv=device
2d 75 69 64 3d 45 43 32 33 37 41 44 31 43 32 42 | -uid=EC237AD1C2B
46 41 35 39 35 37 45 31 45 30 43 35 46 43 32 32 | FA5957E1E0C5FC22
39 43 30 38 35 45 39 45 39 30 42 32 39 38 43 45 | 9C085E9E90B298CE
37 41 43 41 35 41 33 38 33 30 37 36 35 30 33 43 | 7ACA5A383076503C
30 36 41 33 33 04 06 43 d4 0b 11 1a 31 00 00 00 | 06A33..C....1...
09 01 2b 61 75 64 69 74 2d 73 65 73 73 69 6f 6e | ..+audit-session
2d 69 64 3d 34 33 64 34 30 62 31 31 30 63 30 62 | -id=43d40b110c0b
64 30 30 30 36 33 36 39 39 33 31 34 1a 21 00 00 | d00063699314.!..
00 09 01 1b 69 70 3a 73 6f 75 72 63 65 2d 69 70 | ....ip:source-ip
3d 36 34 2e 32 35 32 2e 35 32 2e 37 30 1a 1a 00 | =CLIENT-PUBLIC-IP...
00 0c 04 92 14 44 65 66 61 75 6c 74 57 45 42 56 | .....DefaultWEBV
50 4e 47 72 6f 75 70 1a 0c 00 00 0c 04 96 06 00 | PNGroup.........
00 00 02 1a 15 00 00 00 09 01 0f 63 6f 61 2d 70 | ...........coa-p
75 73 68 3d 74 72 75 65 | ush=true

Parsed packet data.....
Radius: Code = 1 (0x01)
Radius: Identifier = 13 (0x0D)
Radius: Length = 696 (0x02B8)
Radius: Vector: AAF3E3BC1D3F3E95BC37252FC1C9F35F
Radius: Type = 1 (0x01) User-Name
Radius: Length = 13 (0x0D)
Radius: Value (String) =
74 79 6c 65 72 70 65 72 6b 65 79 | tylerperkey
Radius: Type = 5 (0x05) NAS-Port
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0xC0BD000
Radius: Type = 30 (0x1E) Called-Station-Id
Radius: Length = 13 (0x0D)
Radius: Value (String) =
36 37 2e 32 31 32 2e 31 31 2e 36 | ASA-OUTSIDE-IP
Radius: Type = 31 (0x1F) Calling-Station-Id
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 61 (0x3D) NAS-Port-Type
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0x5
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 24 (0x18)
Radius: Vendor ID = 311 (0x00000137)
Radius: Type = 11 (0x0B) MS-CHAP-Challenge
Radius: Length = 18 (0x12)
Radius: Value (String) =
e4 0b 3a 9d 0e 3a a7 f7 35 e6 41 61 6d 7a c7 45 | ..:..:..5.Aamz.E
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 58 (0x3A)
Radius: Vendor ID = 311 (0x00000137)
Radius: Type = 25 (0x19) MS-CHAP2-Response
Radius: Length = 52 (0x34)
Radius: Value (String) =
00 00 55 0e e4 1e c6 96 64 bd 15 2e 94 f2 4d 4e | ..U.....d.....MN
ad 87 00 00 00 00 00 00 00 00 3b 0c 21 24 9c 62 | ..........;.!$.b
1d 36 f9 e6 a3 5f 2e 56 27 01 92 ec a5 49 00 66 | .6..._.V'....I.f
48 11 | H.
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 35 (0x23)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 29 (0x1D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e | latform=win
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 44 (0x2C)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 38 (0x26)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 6d | mdm-tlv=device-m
61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 64 2d 64 | ac=00-0c-29-cd-d
34 2d 30 34 | 4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 50 (0x32)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 44 (0x2C)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 | mdm-tlv=device-t
79 70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e | ype=VMware, Inc.
20 56 4d 77 61 72 65 37 2c 31 | VMware7,1
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d | latform-version=
31 30 2e 30 2e 31 39 30 34 34 20 | 10.0.19044
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
75 62 6c 69 63 2d 6d 61 63 3d 30 30 2d 30 63 2d | ublic-mac=00-0c-
32 39 2d 63 64 2d 64 34 2d 30 34 | 29-cd-d4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 59 (0x3B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 53 (0x35)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 61 63 2d 75 73 65 72 2d | mdm-tlv=ac-user-
61 67 65 6e 74 3d 41 6e 79 43 6f 6e 6e 65 63 74 | agent=AnyConnect
20 57 69 6e 64 6f 77 73 20 34 2e 31 30 2e 30 35 | Windows 4.10.05
31 31 31 | 111
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 91 (0x5B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 85 (0x55)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 75 | mdm-tlv=device-u
69 64 3d 45 43 32 33 37 41 44 31 43 32 42 46 41 | id=EC237AD1C2BFA
35 39 35 37 45 31 45 30 43 35 46 43 32 32 39 43 | 5957E1E0C5FC229C
30 38 35 45 39 45 39 30 42 32 39 38 43 45 37 41 | 085E9E90B298CE7A
43 41 35 41 33 38 33 30 37 36 35 30 33 43 30 36 | CA5A383076503C06
41 33 33 | A33
Radius: Type = 4 (0x04) NAS-IP-Address
Radius: Length = 6 (0x06)
Radius: Value (IP Address) = ASA-INSIDE-IP (0x43D40B11)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 49 (0x31)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 43 (0x2B)
Radius: Value (String) =
61 75 64 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 | audit-session-id
3d 34 33 64 34 30 62 31 31 30 63 30 62 64 30 30 | =43d40b110c0bd00
30 36 33 36 39 39 33 31 34 | 063699314
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 33 (0x21)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 27 (0x1B)
Radius: Value (String) =
69 70 3a 73 6f 75 72 63 65 2d 69 70 3d 36 34 2e | ip:source-ip=64.
32 35 32 2e 35 32 2e 37 30 | 252.52.70
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 26 (0x1A)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 146 (0x92) Tunnel-Group-Name
Radius: Length = 20 (0x14)
Radius: Value (String) =
44 65 66 61 75 6c 74 57 45 42 56 50 4e 47 72 6f | DefaultWEBVPNGro
75 70 | up
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 12 (0x0C)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 150 (0x96) Client-Type
Radius: Length = 6 (0x06)
Radius: Value (Integer) = 2 (0x0002)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 21 (0x15)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 15 (0x0F)
Radius: Value (String) =
63 6f 61 2d 70 75 73 68 3d 74 72 75 65 | coa-push=true
send pkt 10.50.99.11/1645
RADIUS_SENT:server response timeout
radius mkreq: 0x11
alloc_rip 0x00002aaac34c4980
new request 0x11 --> 14 (0x00002aaac34c4980)
got user 'tylerperkey'
got password
add_req 0x00002aaac34c4980 session 0x11 id 14
RADIUS_DELETE
remove_req 0x00002aaac34c5228 session 0x10 id 13
free_rip 0x00002aaac34c5228
RADIUS_REQUEST
radius.c: rad_mkpkt
rad_mkpkt: ip:source-ip=CLIENT-PUBLIC-IP

RADIUS packet decode (authentication request)

--------------------------------------
Raw packet data (length = 696).....
01 0e 02 b8 e0 9b 19 9a da d8 78 d7 8d ed 61 56 | ..........x...aV
e1 5f be a1 01 0d 74 79 6c 65 72 70 65 72 6b 65 | ._....tylerperke
79 05 06 0c 0b d0 00 1e 0d 36 37 2e 32 31 32 2e | y........67.212.
31 31 2e 36 1f 0e 36 34 2e 32 35 32 2e 35 32 2e | 11.6..64.252.52.
37 30 3d 06 00 00 00 05 42 0e 36 34 2e 32 35 32 | 70=.....B.64.252
2e 35 32 2e 37 30 1a 18 00 00 01 37 0b 12 6c d7 | .52.70.....7..l.
1c 08 6d b0 e2 67 1e 75 24 60 cd a5 43 f5 1a 3a | ..m..g.u$`..C..:
00 00 01 37 19 34 00 00 e5 40 34 e9 b4 33 7f 70 | ...7.4...@4..p
ad 8a bb 7b 6d 81 6f c8 00 00 00 00 00 00 00 00 | ...{m.o.........
06 3a d9 04 4b ee fd 6a 73 74 ab 7c d4 7a c6 5f | .:..K..jst.|.z._
83 9a a8 92 5e 6e 76 93 1a 23 00 00 00 09 01 1d | ....^nv..#......
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e 1a 2c 00 00 00 | latform=win.,...
09 01 26 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 | ..&mdm-tlv=devic
65 2d 6d 61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 | e-mac=00-0c-29-c
64 2d 64 34 2d 30 34 1a 32 00 00 00 09 01 2c 6d | d-d4-04.2.....,m
64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 79 | dm-tlv=device-ty
70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e 20 | pe=VMware, Inc.
56 4d 77 61 72 65 37 2c 31 1a 33 00 00 00 09 01 | VMware7,1.3.....
2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d | -mdm-tlv=device-
70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e | platform-version
3d 31 30 2e 30 2e 31 39 30 34 34 20 1a 33 00 00 | =10.0.19044 .3..
00 09 01 2d 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 | ...-mdm-tlv=devi
63 65 2d 70 75 62 6c 69 63 2d 6d 61 63 3d 30 30 | ce-public-mac=00
2d 30 63 2d 32 39 2d 63 64 2d 64 34 2d 30 34 1a | -0c-29-cd-d4-04.
3b 00 00 00 09 01 35 6d 64 6d 2d 74 6c 76 3d 61 | ;.....5mdm-tlv=a
63 2d 75 73 65 72 2d 61 67 65 6e 74 3d 41 6e 79 | c-user-agent=Any
43 6f 6e 6e 65 63 74 20 57 69 6e 64 6f 77 73 20 | Connect Windows
34 2e 31 30 2e 30 35 31 31 31 1a 5b 00 00 00 09 | 4.10.05111.[....
01 55 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 | .Umdm-tlv=device
2d 75 69 64 3d 45 43 32 33 37 41 44 31 43 32 42 | -uid=EC237AD1C2B
46 41 35 39 35 37 45 31 45 30 43 35 46 43 32 32 | FA5957E1E0C5FC22
39 43 30 38 35 45 39 45 39 30 42 32 39 38 43 45 | 9C085E9E90B298CE
37 41 43 41 35 41 33 38 33 30 37 36 35 30 33 43 | 7ACA5A383076503C
30 36 41 33 33 04 06 43 d4 0b 11 1a 31 00 00 00 | 06A33..C....1...
09 01 2b 61 75 64 69 74 2d 73 65 73 73 69 6f 6e | ..+audit-session
2d 69 64 3d 34 33 64 34 30 62 31 31 30 63 30 62 | -id=43d40b110c0b
64 30 30 30 36 33 36 39 39 33 31 34 1a 21 00 00 | d00063699314.!..
00 09 01 1b 69 70 3a 73 6f 75 72 63 65 2d 69 70 | ....ip:source-ip
3d 36 34 2e 32 35 32 2e 35 32 2e 37 30 1a 1a 00 | =CLIENT-PUBLIC-IP...
00 0c 04 92 14 44 65 66 61 75 6c 74 57 45 42 56 | .....DefaultWEBV
50 4e 47 72 6f 75 70 1a 0c 00 00 0c 04 96 06 00 | PNGroup.........
00 00 02 1a 15 00 00 00 09 01 0f 63 6f 61 2d 70 | ...........coa-p
75 73 68 3d 74 72 75 65 | ush=true

Parsed packet data.....
Radius: Code = 1 (0x01)
Radius: Identifier = 14 (0x0E)
Radius: Length = 696 (0x02B8)
Radius: Vector: E09B199ADAD878D78DED6156E15FBEA1
Radius: Type = 1 (0x01) User-Name
Radius: Length = 13 (0x0D)
Radius: Value (String) =
74 79 6c 65 72 70 65 72 6b 65 79 | tylerperkey
Radius: Type = 5 (0x05) NAS-Port
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0xC0BD000
Radius: Type = 30 (0x1E) Called-Station-Id
Radius: Length = 13 (0x0D)
Radius: Value (String) =
36 37 2e 32 31 32 2e 31 31 2e 36 | ASA-OUTSIDE-IP
Radius: Type = 31 (0x1F) Calling-Station-Id
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 61 (0x3D) NAS-Port-Type
Radius: Length = 6 (0x06)
Radius: Value (Hex) = 0x5
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint
Radius: Length = 14 (0x0E)
Radius: Value (String) =
36 34 2e 32 35 32 2e 35 32 2e 37 30 | CLIENT-PUBLIC-IP
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 24 (0x18)
Radius: Vendor ID = 311 (0x00000137)
Radius: Type = 11 (0x0B) MS-CHAP-Challenge
Radius: Length = 18 (0x12)
Radius: Value (String) =
6c d7 1c 08 6d b0 e2 67 1e 75 24 60 cd a5 43 f5 | l...m..g.u$`..C.
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 58 (0x3A)
Radius: Vendor ID = 311 (0x00000137)
Radius: Type = 25 (0x19) MS-CHAP2-Response
Radius: Length = 52 (0x34)
Radius: Value (String) =
00 00 e5 40 34 e9 b4 33 7f 70 ad 8a bb 7b 6d 81 | ...@4..p...{m.
6f c8 00 00 00 00 00 00 00 00 06 3a d9 04 4b ee | o..........:..K.
fd 6a 73 74 ab 7c d4 7a c6 5f 83 9a a8 92 5e 6e | .jst.|.z._....^n
76 93 | v.
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 35 (0x23)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 29 (0x1D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 3d 77 69 6e | latform=win
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 44 (0x2C)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 38 (0x26)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 6d | mdm-tlv=device-m
61 63 3d 30 30 2d 30 63 2d 32 39 2d 63 64 2d 64 | ac=00-0c-29-cd-d
34 2d 30 34 | 4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 50 (0x32)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 44 (0x2C)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 | mdm-tlv=device-t
79 70 65 3d 56 4d 77 61 72 65 2c 20 49 6e 63 2e | ype=VMware, Inc.
20 56 4d 77 61 72 65 37 2c 31 | VMware7,1
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d | latform-version=
31 30 2e 30 2e 31 39 30 34 34 20 | 10.0.19044
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 51 (0x33)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 45 (0x2D)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
75 62 6c 69 63 2d 6d 61 63 3d 30 30 2d 30 63 2d | ublic-mac=00-0c-
32 39 2d 63 64 2d 64 34 2d 30 34 | 29-cd-d4-04
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 59 (0x3B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 53 (0x35)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 61 63 2d 75 73 65 72 2d | mdm-tlv=ac-user-
61 67 65 6e 74 3d 41 6e 79 43 6f 6e 6e 65 63 74 | agent=AnyConnect
20 57 69 6e 64 6f 77 73 20 34 2e 31 30 2e 30 35 | Windows 4.10.05
31 31 31 | 111
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 91 (0x5B)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 85 (0x55)
Radius: Value (String) =
6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 75 | mdm-tlv=device-u
69 64 3d 45 43 32 33 37 41 44 31 43 32 42 46 41 | id=EC237AD1C2BFA
35 39 35 37 45 31 45 30 43 35 46 43 32 32 39 43 | 5957E1E0C5FC229C
30 38 35 45 39 45 39 30 42 32 39 38 43 45 37 41 | 085E9E90B298CE7A
43 41 35 41 33 38 33 30 37 36 35 30 33 43 30 36 | CA5A383076503C06
41 33 33 | A33
Radius: Type = 4 (0x04) NAS-IP-Address
Radius: Length = 6 (0x06)
Radius: Value (IP Address) = ASA-INSIDE-IP (0x43D40B11)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 49 (0x31)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 43 (0x2B)
Radius: Value (String) =
61 75 64 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 | audit-session-id
3d 34 33 64 34 30 62 31 31 30 63 30 62 64 30 30 | =43d40b110c0bd00
30 36 33 36 39 39 33 31 34 | 063699314
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 33 (0x21)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 27 (0x1B)
Radius: Value (String) =
69 70 3a 73 6f 75 72 63 65 2d 69 70 3d 36 34 2e | ip:source-ip=64.
32 35 32 2e 35 32 2e 37 30 | 252.52.70
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 26 (0x1A)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 146 (0x92) Tunnel-Group-Name
Radius: Length = 20 (0x14)
Radius: Value (String) =
44 65 66 61 75 6c 74 57 45 42 56 50 4e 47 72 6f | DefaultWEBVPNGro
75 70 | up
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 12 (0x0C)
Radius: Vendor ID = 3076 (0x00000C04)
Radius: Type = 150 (0x96) Client-Type
Radius: Length = 6 (0x06)
Radius: Value (Integer) = 2 (0x0002)
Radius: Type = 26 (0x1A) Vendor-Specific
Radius: Length = 21 (0x15)
Radius: Vendor ID = 9 (0x00000009)
Radius: Type = 1 (0x01) Cisco-AV-pair
Radius: Length = 15 (0x0F)
Radius: Value (String) =
63 6f 61 2d 70 75 73 68 3d 74 72 75 65 | coa-push=true
send pkt 10.50.99.11/1645
Nov 07 2022 18:22:38 COMPANY_CISCO_ASA : %ASA-2-113022: AAA Marking RADIUS server 10.50.99.11 in aaa-server group PNLRADIUS as FAILED
Nov 07 2022 18:22:38 COMPANY_CISCO_ASA : %ASA-2-113023: AAA Marking RADIUS server 10.50.99.11 in aaa-server group PNLRADIUS as ACTIVE
RADIUS_SENT:server response timeout
RADIUS_DELETE
remove_req 0x00002aaac34c4980 session 0x11 id 14
free_rip 0x00002aaac34c4980
radius: send queue empty

Sheraz.Salim · ‎11-08-2022

can you setup the wireshark capture on these radius server and share the pcap file. This given information is not too useful to pin point where the issue is.

please do not forget to rate.