Greetings all,
We have a successfully running Radiator RADIUS server working with several Ascend boxes for years. We want to use MikroTik to auth simple hardwired PPTP clients. When using the local secrets database in the Tik this is easily accomplished. However when attempting to use RADIUS authentication we continuously see timeouts. The test below was performed with PPTP on an XP client computer. I have tweaked just about everything imaginable but I am not able to get the Tik to stop indicating timeouts. The REPLY attributes make no difference at all at this point. Any help is much appreciated.
TIK LOG:
21:41:17 pptp,info TCP connection established from 66.CLIENT-COMPUTER
21:41:17 pptp,ppp,info : waiting for call…
21:41:28 pptp,ppp,info : terminating… - user vpn-cl-test
authentication failed - radius timeout (6)
21:41:28 pptp,ppp,info : disconnected
The RADIUS logs indicate a reply being sent to the Tik:
RADIUS LOG:
Wed Oct 4 21:41:19 2006: DEBUG: Packet dump:
*** Received from 66.MIKROTIK-GATEWAY port 32770 …
Code: Access-Request
Identifier: 29
Authentic: <158><234><6><211>ZX><224><164><211>0<244><194><140><246>C
Attributes:
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 102
NAS-Port-Type = Virtual
User-Name = “vpn-cl-test”
Calling-Station-Id = “66.CLIENT-COMPUTER”
Called-Station-Id = “66.MIKROTIK-GATEWAY”
MS-CHAP-Challenge = “`<244>)<216><158><187>knr<193><18><172><214>h[U”
MS-CHAP2-Response = “<1><0><209>D<176>@<31>RT<235><139>+,<139><229><191>*<248><0><0><0><0><0><0><0><0><11><203><222><241><172><220><4>1lW<129>+<27><13><253>y<242>3R<8><228><215><253><216>”
NAS-Identifier = “vpn-gw-1”
NAS-IP-Address = 66.MIKROTIK-GATEWAY
Wed Oct 4 21:41:19 2006: DEBUG: Handling request with Handler ‘Realm=DEFAULT’
Wed Oct 4 21:41:19 2006: DEBUG: SDB1 Deleting session for vpn-cl-test, 66.MIKROTIK-GATEWAY, 102
Wed Oct 4 21:41:19 2006: DEBUG: do query is: ‘delete from RADONLINE where NASIDENTIFIER=‘66.MIKROTIK-GATEWAY’ and NASPORT=0102’:
Wed Oct 4 21:41:19 2006: DEBUG: Handling with Radius::AuthSQL
Wed Oct 4 21:41:19 2006: DEBUG: Handling with Radius::AuthSQL:
Wed Oct 4 21:41:19 2006: DEBUG: Query is: ‘select PASSWORD, CHECKATTR, REPLYATTR from SUBSCRIBERS where USERNAME=‘vpn-cl-test’’:
Wed Oct 4 21:41:19 2006: DEBUG: Radius::AuthSQL looks for match with vpn-cl-test
Wed Oct 4 21:41:19 2006: DEBUG: Radius::AuthSQL ACCEPT:
Wed Oct 4 21:41:19 2006: DEBUG: Access accepted for vpn-cl-test
Wed Oct 4 21:41:19 2006: DEBUG: Packet dump:
*** Sending to 66.MIKROTIK-GATEWAY port 32770 …
Code: Access-Accept
Identifier: 29
Authentic: <158><234><6><211>ZX><224><164><211>0<244><194><140><246>C
Attributes:
MS-CHAP2-Success = “<1>S=A673FB63765CB711F7E6A2A895EADFFEA312D2C6”
User-Service = 2
Framed-Protocol = 1