Mailing List Archive

VPDN CHAP/CLEAR
Hi

i have a question:

I have a cisco Router for L2TP/PPP

I receive a radius requete from my supplier:
rad_recv: Access-Request packet from host xxx port 33696, id=30, length=333
Called-Station-Id = "dataverizon"
Calling-Station-Id = "xxxx"
User-Password = "12345"

i sent a Access-accept with simplely:

Sending Access-Accept of id 30 to xx port 33696
Proxy-State = 0x3833
Tunnel-Type:0 = L2TP
Tunnel-Medium-Type:0 = IPv4
Tunnel-Server-Endpoint:0 = "192.168.100.100"
Tunnel-Password:0 = "xxx"
Tunnel-Assignment-Id:0 = "LNS-1"
Cisco-AVPair = "vpdn:l2tp-tunnel-authen=no"
Tunnel-Client-Auth-Id:0 = "LAC-1"
Tunnel-Server-Auth-Id:0 = "LNS-1"




my router receive the tunnel and sent a request to my radius:

rad_recv: Access-Request packet from host 192.168.100.100 port 1645,
id=233, length=165
Framed-Protocol = PPP
User-Password = "LXXmiDzRQCyB9EDORmZSnI0oAqNbu2F9"



i don't know why, my router 192.168.100.100 convert User-Password= 12345 to
a long password (CHAP ? MD5 ? )


the problems, in the database of my free radius, i have a entry in radcheck
in Cleartext-Password and 12345:


2568:Wed Nov 15 18:54:34 2023 : Auth: Login OK: [xxx@Xx/12345] (from client
RAD-1 port 0 cli xx)
2569:Wed Nov 15 18:54:34 2023 : Auth: Login incorrect (rlm_pap: CLEAR TEXT
password check failed): [xxx@Xx/LXXmiDzRQCyB9EDORmZSnI0oAqNbu2F9 ] (from
client 192.168.100.100 port 390 cli xx)

Anyone know this problems ?

regards
_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/