...
| Информация |
|---|
Данный функционал доступен начиная с версии ПО 1.30.0 для устройств WLC-15/30/3200, ESR-15, WLC-30, ESR-30, WLC-3200, ESR-3200, /15R/30/3200 и программного контроллера vWLC. |
| Оглавление |
|---|
Введение
Начиная с версии 1.30.0 появилась возможность оперативно производить troubleshooting RADIUS-пакетов в таких схемах, как:
Команда show radius debug
...
- flash:data/ – встроенный flash-накопитель устройства;
- usb://usb_name:/ – внешний USB-накопитель;
- mmc://mmc_name:/ – внешний MicroSD-накопитель;
- hdd://hdd_name:/ – внешний SSD\/HDD-накопитель, форм-фактора 2.5 дюйма.
| Информация |
|---|
MicroSD-слот поддержан на устройствах WLC-30, WLC-3200, ESR-3200. SSD\/HDD-накопитель форм-фактора 2.5 дюйма, поддержан на устройствах WLC-15, WLC-30, WLC-3200. |
| Блок кода | ||||
|---|---|---|---|---|
| ||||
#Запись отладочной информации RADIUS в файл с названием test-file на внутренний flash-накопитель устройства wlc-30(debug)# show radius-debug file flash:data/test-file.txt Total lines written: 1339 File saved wlc-30# dir flash:data/ Name Type Size Last modified ---------------------------------------------------------- ---------- -------- -- ------------------------- test-file.txt File 106.64 KB Thu Nov 21 12:07:29 2024 #Выгрузка файла на tftp-сервер для последующего анализа wlc-30r# copy flash:data/test-file.txt tftp://100.110.0.214:/test-file.txt |******************************************| 100% (106kB) Success! |
...
| Блок кода | ||
|---|---|---|
| ||
wlc-15#
wlc-15# debug
wlc-15(debug)# show radius-debug username tester ip-address 100.129.56.1 timeout 600
(43) Thu Nov 21 15:38:09 2024: Debug: Received Access-Request Id 41 from 100.129.56.1:37236 to 100.129.58.1:1812 length 259
(43) Thu Nov 21 15:38:09 2024: Debug: User-Name = "tester"
(43) Thu Nov 21 15:38:09 2024: Debug: NAS-IP-Address = 100.129.56.1
(43) Thu Nov 21 15:38:09 2024: Debug: Eltex-Domain = "default"
(43) Thu Nov 21 15:38:09 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(43) Thu Nov 21 15:38:09 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(43) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Type = Wireless-802.11
(43) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Id = "10"
(43) Thu Nov 21 15:38:09 2024: Debug: Service-Type = Framed-User
(43) Thu Nov 21 15:38:09 2024: Debug: NAS-Port = 1
(43) Thu Nov 21 15:38:09 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(43) Thu Nov 21 15:38:09 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(43) Thu Nov 21 15:38:09 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(43) Thu Nov 21 15:38:09 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(43) Thu Nov 21 15:38:09 2024: Debug: WLAN-Group-Cipher = 1027076
(43) Thu Nov 21 15:38:09 2024: Debug: WLAN-AKM-Suite = 1027073
(43) Thu Nov 21 15:38:09 2024: Debug: Eltex-AP-Domain = "with-gre"
(43) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1400
(43) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x0246000b01746573746572
(43) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0x8052997bb00c324abe23685055e7e121
(43) Thu Nov 21 15:38:09 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(43) Thu Nov 21 15:38:09 2024: Debug: authorize {
(43) Thu Nov 21 15:38:09 2024: Debug: policy filter_username {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) -> TRUE
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(43) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: } # if (&User-Name) = notfound
(43) Thu Nov 21 15:38:09 2024: Debug: } # policy filter_username = notfound
(43) Thu Nov 21 15:38:09 2024: Debug: [preprocess] = ok
(43) Thu Nov 21 15:38:09 2024: Debug: [chap] = noop
(43) Thu Nov 21 15:38:09 2024: Debug: [mschap] = noop
(43) Thu Nov 21 15:38:09 2024: Debug: [digest] = noop
(43) Thu Nov 21 15:38:09 2024: Debug: suffix: Checking for suffix after "@"
(43) Thu Nov 21 15:38:09 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(43) Thu Nov 21 15:38:09 2024: Debug: suffix: No such realm "NULL"
(43) Thu Nov 21 15:38:09 2024: Debug: [suffix] = noop
(43) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(43) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry tester at line 5
(43) Thu Nov 21 15:38:09 2024: Debug: [files_multi] = ok
(43) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(43) Thu Nov 21 15:38:09 2024: Debug: else {
(43) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent EAP Response (code 2) ID 70 length 11
(43) Thu Nov 21 15:38:09 2024: Debug: eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize
(43) Thu Nov 21 15:38:09 2024: Debug: [eap] = ok
(43) Thu Nov 21 15:38:09 2024: Debug: } # else = ok
(43) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(43) Thu Nov 21 15:38:09 2024: Debug: if (ok) -> TRUE
(43) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(43) Thu Nov 21 15:38:09 2024: Debug: return
(43) Thu Nov 21 15:38:09 2024: Debug: } # if (ok) = ok
(43) Thu Nov 21 15:38:09 2024: Debug: } # authorize = ok
(43) Thu Nov 21 15:38:09 2024: Debug: Found Auth-Type = eap
(43) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(43) Thu Nov 21 15:38:09 2024: Debug: authenticate {
(43) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent packet with method EAP Identity (1)
(43) Thu Nov 21 15:38:09 2024: Debug: eap: Calling submodule eap_peap to process data
(43) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Initiating new session
(43) Thu Nov 21 15:38:09 2024: Debug: eap: Sending EAP Request (code 1) ID 71 length 6
(43) Thu Nov 21 15:38:09 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8e935dca6
(43) Thu Nov 21 15:38:09 2024: Debug: [eap] = handled
(43) Thu Nov 21 15:38:09 2024: Debug: } # authenticate = handled
(43) Thu Nov 21 15:38:09 2024: Debug: Using Post-Auth-Type Challenge
(43) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(43) Thu Nov 21 15:38:09 2024: Debug: Challenge { ... } # empty sub-section is ignored
(43) Thu Nov 21 15:38:09 2024: Debug: session-state: Saving cached attributes
(43) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1004
(43) Thu Nov 21 15:38:09 2024: Debug: Sent Access-Challenge Id 41 from 100.129.58.1:1812 to 100.129.56.1:37236 length 76
(43) Thu Nov 21 15:38:09 2024: Debug: Eltex-Tls-Enabled = 0
(43) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x014700061920
(43) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(43) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8e935dca62745240ad035bf82
(43) Thu Nov 21 15:38:09 2024: Debug: Finished request
(44) Thu Nov 21 15:38:09 2024: Debug: Received Access-Request Id 42 from 100.129.56.1:37236 to 100.129.58.1:1812 length 427
(44) Thu Nov 21 15:38:09 2024: Debug: User-Name = "tester"
(44) Thu Nov 21 15:38:09 2024: Debug: NAS-IP-Address = 100.129.56.1
(44) Thu Nov 21 15:38:09 2024: Debug: Eltex-Domain = "default"
(44) Thu Nov 21 15:38:09 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(44) Thu Nov 21 15:38:09 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(44) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Type = Wireless-802.11
(44) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Id = "10"
(44) Thu Nov 21 15:38:09 2024: Debug: Service-Type = Framed-User
(44) Thu Nov 21 15:38:09 2024: Debug: NAS-Port = 1
(44) Thu Nov 21 15:38:09 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(44) Thu Nov 21 15:38:09 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(44) Thu Nov 21 15:38:09 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(44) Thu Nov 21 15:38:09 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(44) Thu Nov 21 15:38:09 2024: Debug: WLAN-Group-Cipher = 1027076
(44) Thu Nov 21 15:38:09 2024: Debug: WLAN-AKM-Suite = 1027073
(44) Thu Nov 21 15:38:09 2024: Debug: Eltex-AP-Domain = "with-gre"
(44) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1400
(44) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x024700a119800000009716030100920100008e0303673ef170064c92e3d9f914a8c17727c881d308d40f531afb93baaaf9f565df9700002c00ffc02cc02bc024c023c00ac009c008c030c02fc00
(44) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8e935dca62745240ad035bf82
(44) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0xeb9ce4f152d26f14fe009617feb33a71
(44) Thu Nov 21 15:38:09 2024: Debug: Restoring &session-state
(44) Thu Nov 21 15:38:09 2024: Debug: &session-state:Framed-MTU = 1004
(44) Thu Nov 21 15:38:09 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(44) Thu Nov 21 15:38:09 2024: Debug: authorize {
(44) Thu Nov 21 15:38:09 2024: Debug: policy filter_username {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) -> TRUE
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(44) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: } # if (&User-Name) = notfound
(44) Thu Nov 21 15:38:09 2024: Debug: } # policy filter_username = notfound
(44) Thu Nov 21 15:38:09 2024: Debug: [preprocess] = ok
(44) Thu Nov 21 15:38:09 2024: Debug: [chap] = noop
(44) Thu Nov 21 15:38:09 2024: Debug: [mschap] = noop
(44) Thu Nov 21 15:38:09 2024: Debug: [digest] = noop
(44) Thu Nov 21 15:38:09 2024: Debug: suffix: Checking for suffix after "@"
(44) Thu Nov 21 15:38:09 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(44) Thu Nov 21 15:38:09 2024: Debug: suffix: No such realm "NULL"
(44) Thu Nov 21 15:38:09 2024: Debug: [suffix] = noop
(44) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(44) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry tester at line 5
(44) Thu Nov 21 15:38:09 2024: Debug: [files_multi] = ok
(44) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(44) Thu Nov 21 15:38:09 2024: Debug: else {
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent EAP Response (code 2) ID 71 length 161
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Continuing tunnel setup
(44) Thu Nov 21 15:38:09 2024: Debug: [eap] = ok
(44) Thu Nov 21 15:38:09 2024: Debug: } # else = ok
(44) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(44) Thu Nov 21 15:38:09 2024: Debug: if (ok) -> TRUE
(44) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(44) Thu Nov 21 15:38:09 2024: Debug: return
(44) Thu Nov 21 15:38:09 2024: Debug: } # if (ok) = ok
(44) Thu Nov 21 15:38:09 2024: Debug: } # authorize = ok
(44) Thu Nov 21 15:38:09 2024: Debug: Found Auth-Type = eap
(44) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(44) Thu Nov 21 15:38:09 2024: Debug: authenticate {
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8e935dca6
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Finished EAP session with state 0xe972c5d8e935dca6
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8e935dca6, released from the list
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Calling submodule eap_peap to process data
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) EAP Peer says that the final record size will be 151 bytes
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) EAP Got all data (151 bytes)
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - before/accept initialization
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server before/accept initialization
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 read client hello A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 write server hello A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 write certificate A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 write key exchange A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 write server done A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 flush data
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 read client certificate A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Server : Need to read more data: SSLv3 read client key exchange A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Server : Need to read more data: SSLv3 read client key exchange A
(44) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) In Handshake Phase
(44) Thu Nov 21 15:38:09 2024: Debug: eap: Sending EAP Request (code 1) ID 72 length 1014
(44) Thu Nov 21 15:38:09 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8e83adca6
(44) Thu Nov 21 15:38:09 2024: Debug: [eap] = handled
(44) Thu Nov 21 15:38:09 2024: Debug: } # authenticate = handled
(44) Thu Nov 21 15:38:09 2024: Debug: Using Post-Auth-Type Challenge
(44) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(44) Thu Nov 21 15:38:09 2024: Debug: Challenge { ... } # empty sub-section is ignored
(44) Thu Nov 21 15:38:09 2024: Debug: session-state: Saving cached attributes
(44) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1004
(44) Thu Nov 21 15:38:09 2024: Debug: Sent Access-Challenge Id 42 from 100.129.58.1:1812 to 100.129.56.1:37236 length 1092
(44) Thu Nov 21 15:38:09 2024: Debug: Eltex-Tls-Enabled = 0
(44) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x014803f619c00000090f1603030039020000350303ca841ca7fba6fa59e4b8f03b2de4c392f99af02b133d18a559f4ca89b0e0c3ca00c03000000dff01000100000b00040300010216030307710
(44) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(44) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8e83adca62745240ad035bf82
(44) Thu Nov 21 15:38:09 2024: Debug: Finished request
(45) Thu Nov 21 15:38:09 2024: Debug: Received Access-Request Id 43 from 100.129.56.1:37236 to 100.129.58.1:1812 length 272
(45) Thu Nov 21 15:38:09 2024: Debug: User-Name = "tester"
(45) Thu Nov 21 15:38:09 2024: Debug: NAS-IP-Address = 100.129.56.1
(45) Thu Nov 21 15:38:09 2024: Debug: Eltex-Domain = "default"
(45) Thu Nov 21 15:38:09 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(45) Thu Nov 21 15:38:09 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(45) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Type = Wireless-802.11
(45) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Id = "10"
(45) Thu Nov 21 15:38:09 2024: Debug: Service-Type = Framed-User
(45) Thu Nov 21 15:38:09 2024: Debug: NAS-Port = 1
(45) Thu Nov 21 15:38:09 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(45) Thu Nov 21 15:38:09 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(45) Thu Nov 21 15:38:09 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(45) Thu Nov 21 15:38:09 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(45) Thu Nov 21 15:38:09 2024: Debug: WLAN-Group-Cipher = 1027076
(45) Thu Nov 21 15:38:09 2024: Debug: WLAN-AKM-Suite = 1027073
(45) Thu Nov 21 15:38:09 2024: Debug: Eltex-AP-Domain = "with-gre"
(45) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1400
(45) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x024800061900
(45) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8e83adca62745240ad035bf82
(45) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0x79778347b42853902dd172864da20b91
(45) Thu Nov 21 15:38:09 2024: Debug: Restoring &session-state
(45) Thu Nov 21 15:38:09 2024: Debug: &session-state:Framed-MTU = 1004
(45) Thu Nov 21 15:38:09 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(45) Thu Nov 21 15:38:09 2024: Debug: authorize {
(45) Thu Nov 21 15:38:09 2024: Debug: policy filter_username {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) -> TRUE
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(45) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: } # if (&User-Name) = notfound
(45) Thu Nov 21 15:38:09 2024: Debug: } # policy filter_username = notfound
(45) Thu Nov 21 15:38:09 2024: Debug: [preprocess] = ok
(45) Thu Nov 21 15:38:09 2024: Debug: [chap] = noop
(45) Thu Nov 21 15:38:09 2024: Debug: [mschap] = noop
(45) Thu Nov 21 15:38:09 2024: Debug: [digest] = noop
(45) Thu Nov 21 15:38:09 2024: Debug: suffix: Checking for suffix after "@"
(45) Thu Nov 21 15:38:09 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(45) Thu Nov 21 15:38:09 2024: Debug: suffix: No such realm "NULL"
(45) Thu Nov 21 15:38:09 2024: Debug: [suffix] = noop
(45) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(45) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry tester at line 5
(45) Thu Nov 21 15:38:09 2024: Debug: [files_multi] = ok
(45) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(45) Thu Nov 21 15:38:09 2024: Debug: else {
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent EAP Response (code 2) ID 72 length 6
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Continuing tunnel setup
(45) Thu Nov 21 15:38:09 2024: Debug: [eap] = ok
(45) Thu Nov 21 15:38:09 2024: Debug: } # else = ok
(45) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(45) Thu Nov 21 15:38:09 2024: Debug: if (ok) -> TRUE
(45) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(45) Thu Nov 21 15:38:09 2024: Debug: return
(45) Thu Nov 21 15:38:09 2024: Debug: } # if (ok) = ok
(45) Thu Nov 21 15:38:09 2024: Debug: } # authorize = ok
(45) Thu Nov 21 15:38:09 2024: Debug: Found Auth-Type = eap
(45) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(45) Thu Nov 21 15:38:09 2024: Debug: authenticate {
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8e83adca6
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Finished EAP session with state 0xe972c5d8e83adca6
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8e83adca6, released from the list
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Calling submodule eap_peap to process data
(45) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Peer ACKed our handshake fragment
(45) Thu Nov 21 15:38:09 2024: Debug: eap: Sending EAP Request (code 1) ID 73 length 1010
(45) Thu Nov 21 15:38:09 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8eb3bdca6
(45) Thu Nov 21 15:38:09 2024: Debug: [eap] = handled
(45) Thu Nov 21 15:38:09 2024: Debug: } # authenticate = handled
(45) Thu Nov 21 15:38:09 2024: Debug: Using Post-Auth-Type Challenge
(45) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(45) Thu Nov 21 15:38:09 2024: Debug: Challenge { ... } # empty sub-section is ignored
(45) Thu Nov 21 15:38:09 2024: Debug: session-state: Saving cached attributes
(45) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1004
(45) Thu Nov 21 15:38:09 2024: Debug: Sent Access-Challenge Id 43 from 100.129.58.1:1812 to 100.129.56.1:37236 length 1086
(45) Thu Nov 21 15:38:09 2024: Debug: Eltex-Tls-Enabled = 0
(45) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x014903f21940300d06092a864886f70d01010b0500308181310b3009060355040613025255310f300d06035504080c065275737369613114301206035504070c0b4e6f766f7369626972736b314
(45) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(45) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8eb3bdca62745240ad035bf82
(45) Thu Nov 21 15:38:09 2024: Debug: Finished request
(46) Thu Nov 21 15:38:09 2024: Debug: Received Access-Request Id 44 from 100.129.56.1:37236 to 100.129.58.1:1812 length 272
(46) Thu Nov 21 15:38:09 2024: Debug: User-Name = "tester"
(46) Thu Nov 21 15:38:09 2024: Debug: NAS-IP-Address = 100.129.56.1
(46) Thu Nov 21 15:38:09 2024: Debug: Eltex-Domain = "default"
(46) Thu Nov 21 15:38:09 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(46) Thu Nov 21 15:38:09 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(46) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Type = Wireless-802.11
(46) Thu Nov 21 15:38:09 2024: Debug: NAS-Port-Id = "10"
(46) Thu Nov 21 15:38:09 2024: Debug: Service-Type = Framed-User
(46) Thu Nov 21 15:38:09 2024: Debug: NAS-Port = 1
(46) Thu Nov 21 15:38:09 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(46) Thu Nov 21 15:38:09 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(46) Thu Nov 21 15:38:09 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(46) Thu Nov 21 15:38:09 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(46) Thu Nov 21 15:38:09 2024: Debug: WLAN-Group-Cipher = 1027076
(46) Thu Nov 21 15:38:09 2024: Debug: WLAN-AKM-Suite = 1027073
(46) Thu Nov 21 15:38:09 2024: Debug: Eltex-AP-Domain = "with-gre"
(46) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1400
(46) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x024900061900
(46) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8eb3bdca62745240ad035bf82
(46) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0xf6921fdf077bcefe93465d0622df347d
(46) Thu Nov 21 15:38:09 2024: Debug: Restoring &session-state
(46) Thu Nov 21 15:38:09 2024: Debug: &session-state:Framed-MTU = 1004
(46) Thu Nov 21 15:38:09 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(46) Thu Nov 21 15:38:09 2024: Debug: authorize {
(46) Thu Nov 21 15:38:09 2024: Debug: policy filter_username {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) -> TRUE
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ / /) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(46) Thu Nov 21 15:38:09 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: } # if (&User-Name) = notfound
(46) Thu Nov 21 15:38:09 2024: Debug: } # policy filter_username = notfound
(46) Thu Nov 21 15:38:09 2024: Debug: [preprocess] = ok
(46) Thu Nov 21 15:38:09 2024: Debug: [chap] = noop
(46) Thu Nov 21 15:38:09 2024: Debug: [mschap] = noop
(46) Thu Nov 21 15:38:09 2024: Debug: [digest] = noop
(46) Thu Nov 21 15:38:09 2024: Debug: suffix: Checking for suffix after "@"
(46) Thu Nov 21 15:38:09 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(46) Thu Nov 21 15:38:09 2024: Debug: suffix: No such realm "NULL"
(46) Thu Nov 21 15:38:09 2024: Debug: [suffix] = noop
(46) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(46) Thu Nov 21 15:38:09 2024: Debug: files_multi: users: Matched entry tester at line 5
(46) Thu Nov 21 15:38:09 2024: Debug: [files_multi] = ok
(46) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(46) Thu Nov 21 15:38:09 2024: Debug: else {
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent EAP Response (code 2) ID 73 length 6
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Continuing tunnel setup
(46) Thu Nov 21 15:38:09 2024: Debug: [eap] = ok
(46) Thu Nov 21 15:38:09 2024: Debug: } # else = ok
(46) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(46) Thu Nov 21 15:38:09 2024: Debug: if (ok) -> TRUE
(46) Thu Nov 21 15:38:09 2024: Debug: if (ok) {
(46) Thu Nov 21 15:38:09 2024: Debug: return
(46) Thu Nov 21 15:38:09 2024: Debug: } # if (ok) = ok
(46) Thu Nov 21 15:38:09 2024: Debug: } # authorize = ok
(46) Thu Nov 21 15:38:09 2024: Debug: Found Auth-Type = eap
(46) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(46) Thu Nov 21 15:38:09 2024: Debug: authenticate {
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8eb3bdca6
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Finished EAP session with state 0xe972c5d8eb3bdca6
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8eb3bdca6, released from the list
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Calling submodule eap_peap to process data
(46) Thu Nov 21 15:38:09 2024: Debug: eap_peap: (TLS) Peer ACKed our handshake fragment
(46) Thu Nov 21 15:38:09 2024: Debug: eap: Sending EAP Request (code 1) ID 74 length 317
(46) Thu Nov 21 15:38:09 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8ea38dca6
(46) Thu Nov 21 15:38:09 2024: Debug: [eap] = handled
(46) Thu Nov 21 15:38:09 2024: Debug: } # authenticate = handled
(46) Thu Nov 21 15:38:09 2024: Debug: Using Post-Auth-Type Challenge
(46) Thu Nov 21 15:38:09 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(46) Thu Nov 21 15:38:09 2024: Debug: Challenge { ... } # empty sub-section is ignored
(46) Thu Nov 21 15:38:09 2024: Debug: session-state: Saving cached attributes
(46) Thu Nov 21 15:38:09 2024: Debug: Framed-MTU = 1004
(46) Thu Nov 21 15:38:09 2024: Debug: Sent Access-Challenge Id 44 from 100.129.58.1:1812 to 100.129.56.1:37236 length 389
(46) Thu Nov 21 15:38:09 2024: Debug: Eltex-Tls-Enabled = 0
(46) Thu Nov 21 15:38:09 2024: Debug: EAP-Message = 0x014a013d1900a271db240af40070d8383b0d1499a92f76240efa2e5f0b75bd61c25c5693938ffab6c28685e5a9a7e9ff04010100ace6e0163e6295adb6a28327b5c00395e2f0feb4841f3283a70
(46) Thu Nov 21 15:38:09 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(46) Thu Nov 21 15:38:09 2024: Debug: State = 0xe972c5d8ea38dca62745240ad035bf82
(46) Thu Nov 21 15:38:09 2024: Debug: Finished request
(47) Thu Nov 21 15:38:12 2024: Debug: Received Access-Request Id 45 from 100.129.56.1:37236 to 100.129.58.1:1812 length 402
(47) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(47) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(47) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(47) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(47) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(47) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(47) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(47) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(47) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(47) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(47) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(47) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(47) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(47) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(47) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(47) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(47) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(47) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024a008819800000007e160303004610000042410423f5d337b5ef95bd6246a2ed3b77f78a23b18c6bd143580437c050474e879456d5b30c5455791886532fda426c319f25f52de4bb73688c706
(47) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ea38dca62745240ad035bf82
(47) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x4fbfe35b822dd4f23cd00967ab5c653a
(47) Thu Nov 21 15:38:12 2024: Debug: Restoring &session-state
(47) Thu Nov 21 15:38:12 2024: Debug: &session-state:Framed-MTU = 1004
(47) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(47) Thu Nov 21 15:38:12 2024: Debug: authorize {
(47) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(47) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(47) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(47) Thu Nov 21 15:38:12 2024: Debug: [preprocess] = ok
(47) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(47) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(47) Thu Nov 21 15:38:12 2024: Debug: [digest] = noop
(47) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(47) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(47) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(47) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(47) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(47) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry tester at line 5
(47) Thu Nov 21 15:38:12 2024: Debug: [files_multi] = ok
(47) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(47) Thu Nov 21 15:38:12 2024: Debug: else {
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 74 length 136
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Continuing tunnel setup
(47) Thu Nov 21 15:38:12 2024: Debug: [eap] = ok
(47) Thu Nov 21 15:38:12 2024: Debug: } # else = ok
(47) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(47) Thu Nov 21 15:38:12 2024: Debug: if (ok) -> TRUE
(47) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(47) Thu Nov 21 15:38:12 2024: Debug: return
(47) Thu Nov 21 15:38:12 2024: Debug: } # if (ok) = ok
(47) Thu Nov 21 15:38:12 2024: Debug: } # authorize = ok
(47) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(47) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(47) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8ea38dca6
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Finished EAP session with state 0xe972c5d8ea38dca6
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8ea38dca6, released from the list
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_peap to process data
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) EAP Peer says that the final record size will be 126 bytes
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) EAP Got all data (126 bytes)
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 read client key exchange A
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 read certificate verify A
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 read finished A
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 write change cipher spec A
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 write finished A
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - Server SSLv3 flush data
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Handshake state - SSL negotiation finished successfully
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Connection Established
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(47) Thu Nov 21 15:38:12 2024: Debug: eap_peap: TLS-Session-Version = "TLS 1.2"
(47) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Request (code 1) ID 75 length 57
(47) Thu Nov 21 15:38:12 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8ed39dca6
(47) Thu Nov 21 15:38:12 2024: Debug: [eap] = handled
(47) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = handled
(47) Thu Nov 21 15:38:12 2024: Debug: Using Post-Auth-Type Challenge
(47) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(47) Thu Nov 21 15:38:12 2024: Debug: Challenge { ... } # empty sub-section is ignored
(47) Thu Nov 21 15:38:12 2024: Debug: session-state: Saving cached attributes
(47) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1004
(47) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(47) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Version = "TLS 1.2"
(47) Thu Nov 21 15:38:12 2024: Debug: Sent Access-Challenge Id 45 from 100.129.58.1:1812 to 100.129.56.1:37236 length 127
(47) Thu Nov 21 15:38:12 2024: Debug: Eltex-Tls-Enabled = 0
(47) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x014b00391900140303000101160303002849b195ac8c59a1d46333e916107a84e292a43db7f6e5836b59c8c37cb7d0dfcd69f685b829e7ab69
(47) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(47) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ed39dca62745240ad035bf82
(47) Thu Nov 21 15:38:12 2024: Debug: Finished request
(48) Thu Nov 21 15:38:12 2024: Debug: Received Access-Request Id 46 from 100.129.56.1:37236 to 100.129.58.1:1812 length 272
(48) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(48) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(48) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(48) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(48) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(48) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(48) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(48) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(48) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(48) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(48) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(48) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(48) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(48) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(48) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(48) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(48) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(48) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024b00061900
(48) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ed39dca62745240ad035bf82
(48) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x82dd95a5c92c2f3fc07f730d829f740f
(48) Thu Nov 21 15:38:12 2024: Debug: Restoring &session-state
(48) Thu Nov 21 15:38:12 2024: Debug: &session-state:Framed-MTU = 1004
(48) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(48) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Version = "TLS 1.2"
(48) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(48) Thu Nov 21 15:38:12 2024: Debug: authorize {
(48) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(48) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(48) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(48) Thu Nov 21 15:38:12 2024: Debug: [preprocess] = ok
(48) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(48) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(48) Thu Nov 21 15:38:12 2024: Debug: [digest] = noop
(48) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(48) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(48) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(48) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(48) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(48) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry tester at line 5
(48) Thu Nov 21 15:38:12 2024: Debug: [files_multi] = ok
(48) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(48) Thu Nov 21 15:38:12 2024: Debug: else {
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 75 length 6
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Continuing tunnel setup
(48) Thu Nov 21 15:38:12 2024: Debug: [eap] = ok
(48) Thu Nov 21 15:38:12 2024: Debug: } # else = ok
(48) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(48) Thu Nov 21 15:38:12 2024: Debug: if (ok) -> TRUE
(48) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(48) Thu Nov 21 15:38:12 2024: Debug: return
(48) Thu Nov 21 15:38:12 2024: Debug: } # if (ok) = ok
(48) Thu Nov 21 15:38:12 2024: Debug: } # authorize = ok
(48) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(48) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(48) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8ed39dca6
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Finished EAP session with state 0xe972c5d8ed39dca6
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8ed39dca6, released from the list
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_peap to process data
(48) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) Peer ACKed our handshake fragment. handshake is finished
(48) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Session established. Decoding tunneled attributes
(48) Thu Nov 21 15:38:12 2024: Debug: eap_peap: PEAP state TUNNEL ESTABLISHED
(48) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Request (code 1) ID 76 length 40
(48) Thu Nov 21 15:38:12 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8ec3edca6
(48) Thu Nov 21 15:38:12 2024: Debug: [eap] = handled
(48) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = handled
(48) Thu Nov 21 15:38:12 2024: Debug: Using Post-Auth-Type Challenge
(48) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(48) Thu Nov 21 15:38:12 2024: Debug: Challenge { ... } # empty sub-section is ignored
(48) Thu Nov 21 15:38:12 2024: Debug: session-state: Saving cached attributes
(48) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1004
(48) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(48) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Version = "TLS 1.2"
(48) Thu Nov 21 15:38:12 2024: Debug: Sent Access-Challenge Id 46 from 100.129.58.1:1812 to 100.129.56.1:37236 length 110
(48) Thu Nov 21 15:38:12 2024: Debug: Eltex-Tls-Enabled = 0
(48) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x014c00281900170303001d49b195ac8c59a1d55225d2729e22fe21d9a67c0216924b115c80a1327d
(48) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(48) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ec3edca62745240ad035bf82
(48) Thu Nov 21 15:38:12 2024: Debug: Finished request
(49) Thu Nov 21 15:38:12 2024: Debug: Received Access-Request Id 47 from 100.129.56.1:37236 to 100.129.58.1:1812 length 308
(49) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(49) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(49) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(49) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(49) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(49) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(49) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(49) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(49) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(49) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(49) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(49) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(49) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024c002a1900170303001ff8975c28e091e730066e4f736163e372fca19ec6aae10f9d73fabe9f52ebcf
(49) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ec3edca62745240ad035bf82
(49) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x97ee747668e390335d3a23fd13637129
(49) Thu Nov 21 15:38:12 2024: Debug: Restoring &session-state
(49) Thu Nov 21 15:38:12 2024: Debug: &session-state:Framed-MTU = 1004
(49) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(49) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Version = "TLS 1.2"
(49) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(49) Thu Nov 21 15:38:12 2024: Debug: authorize {
(49) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(49) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(49) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(49) Thu Nov 21 15:38:12 2024: Debug: [preprocess] = ok
(49) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: [digest] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(49) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(49) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(49) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(49) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry tester at line 5
(49) Thu Nov 21 15:38:12 2024: Debug: [files_multi] = ok
(49) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: else {
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 76 length 42
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Continuing tunnel setup
(49) Thu Nov 21 15:38:12 2024: Debug: [eap] = ok
(49) Thu Nov 21 15:38:12 2024: Debug: } # else = ok
(49) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (ok) -> TRUE
(49) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(49) Thu Nov 21 15:38:12 2024: Debug: return
(49) Thu Nov 21 15:38:12 2024: Debug: } # if (ok) = ok
(49) Thu Nov 21 15:38:12 2024: Debug: } # authorize = ok
(49) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(49) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(49) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8ec3edca6
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Finished EAP session with state 0xe972c5d8ec3edca6
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8ec3edca6, released from the list
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_peap to process data
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) EAP Done initial handshake
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Session established. Decoding tunneled attributes
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: PEAP state WAITING FOR INNER IDENTITY
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Identity - tester
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Got inner identity 'tester'
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Setting default EAP type for tunneled EAP session
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Got tunneled request
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP-Message = 0x024c000b01746573746572
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Setting User-Name to tester
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Sending tunneled request to inner-tunnel
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP-Message = 0x024c000b01746573746572
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: User-Name = "tester"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-IP-Address = 100.129.56.1
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Eltex-Domain = "default"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Identifier = "68:13:E2:35:D2:20"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Port-Type = Wireless-802.11
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Port-Id = "10"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Service-Type = Framed-User
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Port = 1
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Connect-Info = "CONNECT 24Mbps 802.11a"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: WLAN-Pairwise-Cipher = 1027076
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: WLAN-Group-Cipher = 1027076
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: WLAN-AKM-Suite = 1027073
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Eltex-AP-Domain = "with-gre"
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Framed-MTU = 1400
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Event-Timestamp = "Nov 21 2024 15:38:12 GMT+7"
(49) Thu Nov 21 15:38:12 2024: Debug: Virtual server inner-tunnel received request
(49) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024c000b01746573746572
(49) Thu Nov 21 15:38:12 2024: Debug: FreeRADIUS-Proxied-To = 127.0.0.1
(49) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(49) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(49) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(49) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(49) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(49) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(49) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(49) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(49) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(49) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(49) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(49) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(49) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(49) Thu Nov 21 15:38:12 2024: Debug: Event-Timestamp = "Nov 21 2024 15:38:12 GMT+7"
(49) Thu Nov 21 15:38:12 2024: WARNING: Outer and inner identities are the same. User privacy is compromised.
(49) Thu Nov 21 15:38:12 2024: Debug: server inner-tunnel {
(49) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel
(49) Thu Nov 21 15:38:12 2024: Debug: authorize {
(49) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(49) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(49) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(49) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(49) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(49) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(49) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(49) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(49) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 76 length 11
(49) Thu Nov 21 15:38:12 2024: Debug: eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize
(49) Thu Nov 21 15:38:12 2024: Debug: [eap] = ok
(49) Thu Nov 21 15:38:12 2024: Debug: } # authorize = ok
(49) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(49) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(49) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP Identity (1)
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_mschapv2 to process data
(49) Thu Nov 21 15:38:12 2024: Debug: eap_mschapv2: Issuing Challenge
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Request (code 1) ID 77 length 43
(49) Thu Nov 21 15:38:12 2024: Debug: eap: EAP session adding &reply:State = 0x39415d07390c47ca
(49) Thu Nov 21 15:38:12 2024: Debug: [eap] = handled
(49) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = handled
(49) Thu Nov 21 15:38:12 2024: Debug: } # server inner-tunnel
(49) Thu Nov 21 15:38:12 2024: Debug: Virtual server sending reply
(49) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x014d002b1a014d002610e2e14d5f0898922ab87af7edb2f2ee9b667265657261646975732d332e302e3235
(49) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(49) Thu Nov 21 15:38:12 2024: Debug: State = 0x39415d07390c47ca233427c848ccd003
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Got tunneled reply code 11
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP-Message = 0x014d002b1a014d002610e2e14d5f0898922ab87af7edb2f2ee9b667265657261646975732d332e302e3235
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Message-Authenticator = 0x00000000000000000000000000000000
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: State = 0x39415d07390c47ca233427c848ccd003
(49) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Got tunneled Access-Challenge
(49) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Request (code 1) ID 77 length 74
(49) Thu Nov 21 15:38:12 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8ef3fdca6
(49) Thu Nov 21 15:38:12 2024: Debug: [eap] = handled
(49) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = handled
(49) Thu Nov 21 15:38:12 2024: Debug: Using Post-Auth-Type Challenge
(49) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(49) Thu Nov 21 15:38:12 2024: Debug: Challenge { ... } # empty sub-section is ignored
(49) Thu Nov 21 15:38:12 2024: Debug: session-state: Saving cached attributes
(49) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1004
(49) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(49) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Version = "TLS 1.2"
(49) Thu Nov 21 15:38:12 2024: Debug: Sent Access-Challenge Id 47 from 100.129.58.1:1812 to 100.129.56.1:37236 length 144
(49) Thu Nov 21 15:38:12 2024: Debug: Eltex-Tls-Enabled = 0
(49) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x014d004a1900170303003f49b195ac8c59a1d654f33dca05bf20250b88cddeebc0c09887f71b8ff66130ef7a8826f1b8a520a6a2f7813901df73eba9f66ddbc6ff7e0ad4b8e944b839eb
(49) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(49) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ef3fdca62745240ad035bf82
(49) Thu Nov 21 15:38:12 2024: Debug: Finished request
(50) Thu Nov 21 15:38:12 2024: Debug: Received Access-Request Id 48 from 100.129.56.1:37236 to 100.129.58.1:1812 length 362
(50) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(50) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(50) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(50) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(50) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(50) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(50) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(50) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(50) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(50) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(50) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(50) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(50) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024d006019001703030055f8975c28e091e7313eb8678aa99ad357b0caf84c03afe5d765d6edcbc7f2a5241dfed39306b35428a04356f0b8c6da22c8941bc2f57eb2bc410888f59bbe7450557ec
(50) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ef3fdca62745240ad035bf82
(50) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0xad80263807a5eb7abd7d2bba1f3c679d
(50) Thu Nov 21 15:38:12 2024: Debug: Restoring &session-state
(50) Thu Nov 21 15:38:12 2024: Debug: &session-state:Framed-MTU = 1004
(50) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(50) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Version = "TLS 1.2"
(50) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(50) Thu Nov 21 15:38:12 2024: Debug: authorize {
(50) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(50) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(50) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(50) Thu Nov 21 15:38:12 2024: Debug: [preprocess] = ok
(50) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: [digest] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(50) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(50) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(50) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(50) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry tester at line 5
(50) Thu Nov 21 15:38:12 2024: Debug: [files_multi] = ok
(50) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: else {
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 77 length 96
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Continuing tunnel setup
(50) Thu Nov 21 15:38:12 2024: Debug: [eap] = ok
(50) Thu Nov 21 15:38:12 2024: Debug: } # else = ok
(50) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (ok) -> TRUE
(50) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(50) Thu Nov 21 15:38:12 2024: Debug: return
(50) Thu Nov 21 15:38:12 2024: Debug: } # if (ok) = ok
(50) Thu Nov 21 15:38:12 2024: Debug: } # authorize = ok
(50) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(50) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(50) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Expiring EAP session with state 0x39415d07390c47ca
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Finished EAP session with state 0xe972c5d8ef3fdca6
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8ef3fdca6, released from the list
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_peap to process data
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) EAP Done initial handshake
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Session established. Decoding tunneled attributes
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: PEAP state phase2
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP method MSCHAPv2 (26)
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Got tunneled request
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP-Message = 0x024d00411a024d003c31307984efc4700161597ce2539f3e04340000000000000000857df15fd3dd3b9cd17cadd24bddbdbe25b1d02854c7371000746573746572
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Setting User-Name to tester
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Sending tunneled request to inner-tunnel
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP-Message = 0x024d00411a024d003c31307984efc4700161597ce2539f3e04340000000000000000857df15fd3dd3b9cd17cadd24bddbdbe25b1d02854c7371000746573746572
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: User-Name = "tester"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: State = 0x39415d07390c47ca233427c848ccd003
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-IP-Address = 100.129.56.1
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Eltex-Domain = "default"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Identifier = "68:13:E2:35:D2:20"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Port-Type = Wireless-802.11
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Port-Id = "10"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Service-Type = Framed-User
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: NAS-Port = 1
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Connect-Info = "CONNECT 24Mbps 802.11a"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: WLAN-Pairwise-Cipher = 1027076
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: WLAN-Group-Cipher = 1027076
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: WLAN-AKM-Suite = 1027073
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Eltex-AP-Domain = "with-gre"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Framed-MTU = 1400
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Event-Timestamp = "Nov 21 2024 15:38:12 GMT+7"
(50) Thu Nov 21 15:38:12 2024: Debug: Virtual server inner-tunnel received request
(50) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024d00411a024d003c31307984efc4700161597ce2539f3e04340000000000000000857df15fd3dd3b9cd17cadd24bddbdbe25b1d02854c7371000746573746572
(50) Thu Nov 21 15:38:12 2024: Debug: FreeRADIUS-Proxied-To = 127.0.0.1
(50) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(50) Thu Nov 21 15:38:12 2024: Debug: State = 0x39415d07390c47ca233427c848ccd003
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(50) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(50) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(50) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(50) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(50) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(50) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(50) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(50) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(50) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(50) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(50) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(50) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(50) Thu Nov 21 15:38:12 2024: Debug: Event-Timestamp = "Nov 21 2024 15:38:12 GMT+7"
(50) Thu Nov 21 15:38:12 2024: WARNING: Outer and inner identities are the same. User privacy is compromised.
(50) Thu Nov 21 15:38:12 2024: Debug: server inner-tunnel {
(50) Thu Nov 21 15:38:12 2024: Debug: session-state: No cached attributes
(50) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel
(50) Thu Nov 21 15:38:12 2024: Debug: authorize {
(50) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(50) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(50) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(50) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(50) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(50) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(50) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(50) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(50) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 77 length 65
(50) Thu Nov 21 15:38:12 2024: Debug: eap: No EAP Start, assuming it's an on-going EAP conversation
(50) Thu Nov 21 15:38:12 2024: Debug: [eap] = updated
(50) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(50) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry tester at line 5
(50) Thu Nov 21 15:38:12 2024: Debug: [files_multi] = ok
(50) Thu Nov 21 15:38:12 2024: Debug: [expiration] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: [logintime] = noop
(50) Thu Nov 21 15:38:12 2024: WARNING: pap: Auth-Type already set. Not setting to PAP
(50) Thu Nov 21 15:38:12 2024: Debug: [pap] = noop
(50) Thu Nov 21 15:38:12 2024: Debug: } # authorize = updated
(50) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(50) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(50) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Expiring EAP session with state 0x39415d07390c47ca
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Finished EAP session with state 0x39415d07390c47ca
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Previous EAP request found for state 0x39415d07390c47ca, released from the list
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP MSCHAPv2 (26)
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_mschapv2 to process data
(50) Thu Nov 21 15:38:12 2024: Debug: eap_mschapv2: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(50) Thu Nov 21 15:38:12 2024: Debug: eap_mschapv2: authenticate {
(50) Thu Nov 21 15:38:12 2024: Debug: mschap: Found Cleartext-Password, hashing to create NT-Password
(50) Thu Nov 21 15:38:12 2024: Debug: mschap: Creating challenge hash with username: tester
(50) Thu Nov 21 15:38:12 2024: Debug: mschap: Client is using MS-CHAPv2
(50) Thu Nov 21 15:38:12 2024: ERROR: mschap: MS-CHAP2-Response is incorrect
(50) Thu Nov 21 15:38:12 2024: Debug: eap_mschapv2: [mschap] = reject
(50) Thu Nov 21 15:38:12 2024: Debug: eap_mschapv2: } # authenticate = reject
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Failure (code 4) ID 77 length 4
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Freeing handler
(50) Thu Nov 21 15:38:12 2024: Debug: [eap] = reject
(50) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = reject
(50) Thu Nov 21 15:38:12 2024: Debug: Failed to authenticate the user
(50) Thu Nov 21 15:38:12 2024: Debug: Using Post-Auth-Type Reject
(50) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(50) Thu Nov 21 15:38:12 2024: Debug: Post-Auth-Type REJECT {
(50) Thu Nov 21 15:38:12 2024: Debug: attr_filter.access_reject: EXPAND %{User-Name}
(50) Thu Nov 21 15:38:12 2024: Debug: attr_filter.access_reject: --> tester
(50) Thu Nov 21 15:38:12 2024: Debug: attr_filter.access_reject: Matched entry DEFAULT at line 11
(50) Thu Nov 21 15:38:12 2024: Debug: [attr_filter.access_reject] = updated
(50) Thu Nov 21 15:38:12 2024: Debug: update outer.session-state {
(50) Thu Nov 21 15:38:12 2024: Debug: } # update outer.session-state = noop
(50) Thu Nov 21 15:38:12 2024: Debug: } # Post-Auth-Type REJECT = updated
(50) Thu Nov 21 15:38:12 2024: Debug: } # server inner-tunnel
(50) Thu Nov 21 15:38:12 2024: Debug: Virtual server sending reply
(50) Thu Nov 21 15:38:12 2024: Debug: MS-CHAP-Error = "ME=691 R=1 C=b1c57ec11acb98cafda3f21162e8c4d8 V=3 M=Authentication rejected"
(50) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x044d0004
(50) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Got tunneled reply code 3
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: MS-CHAP-Error = "ME=691 R=1 C=b1c57ec11acb98cafda3f21162e8c4d8 V=3 M=Authentication rejected"
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: EAP-Message = 0x044d0004
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Message-Authenticator = 0x00000000000000000000000000000000
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Tunneled authentication was rejected
(50) Thu Nov 21 15:38:12 2024: Debug: eap_peap: FAILURE
(50) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Request (code 1) ID 78 length 46
(50) Thu Nov 21 15:38:12 2024: Debug: eap: EAP session adding &reply:State = 0xe972c5d8ee3cdca6
(50) Thu Nov 21 15:38:12 2024: Debug: [eap] = handled
(50) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = handled
(50) Thu Nov 21 15:38:12 2024: Debug: Using Post-Auth-Type Challenge
(50) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(50) Thu Nov 21 15:38:12 2024: Debug: Challenge { ... } # empty sub-section is ignored
(50) Thu Nov 21 15:38:12 2024: Debug: session-state: Saving cached attributes
(50) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1004
(50) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(50) Thu Nov 21 15:38:12 2024: Debug: TLS-Session-Version = "TLS 1.2"
(50) Thu Nov 21 15:38:12 2024: Debug: Module-Failure-Message := "mschap: MS-CHAP2-Response is incorrect"
(50) Thu Nov 21 15:38:12 2024: Debug: Sent Access-Challenge Id 48 from 100.129.58.1:1812 to 100.129.56.1:37236 length 116
(50) Thu Nov 21 15:38:12 2024: Debug: Eltex-Tls-Enabled = 0
(50) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x014e002e1900170303002349b195ac8c59a1d798bd355a6f14ba67c4d53f463ad1801366b41b485e42ff0ad36c50
(50) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(50) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ee3cdca62745240ad035bf82
(50) Thu Nov 21 15:38:12 2024: Debug: Finished request
(51) Thu Nov 21 15:38:12 2024: Debug: Received Access-Request Id 49 from 100.129.56.1:37236 to 100.129.58.1:1812 length 312
(51) Thu Nov 21 15:38:12 2024: Debug: User-Name = "tester"
(51) Thu Nov 21 15:38:12 2024: Debug: NAS-IP-Address = 100.129.56.1
(51) Thu Nov 21 15:38:12 2024: Debug: Eltex-Domain = "default"
(51) Thu Nov 21 15:38:12 2024: Debug: NAS-Identifier = "68:13:E2:35:D2:20"
(51) Thu Nov 21 15:38:12 2024: Debug: Called-Station-Id = "68-13-E2-35-D2-20:TEST-SSID-WLC-15"
(51) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Type = Wireless-802.11
(51) Thu Nov 21 15:38:12 2024: Debug: NAS-Port-Id = "10"
(51) Thu Nov 21 15:38:12 2024: Debug: Service-Type = Framed-User
(51) Thu Nov 21 15:38:12 2024: Debug: NAS-Port = 1
(51) Thu Nov 21 15:38:12 2024: Debug: Calling-Station-Id = "DA-A7-8A-41-68-F5"
(51) Thu Nov 21 15:38:12 2024: Debug: Connect-Info = "CONNECT 24Mbps 802.11a"
(51) Thu Nov 21 15:38:12 2024: Debug: Acct-Session-Id = "FA94FFC0-B7DB1A4A"
(51) Thu Nov 21 15:38:12 2024: Debug: WLAN-Pairwise-Cipher = 1027076
(51) Thu Nov 21 15:38:12 2024: Debug: WLAN-Group-Cipher = 1027076
(51) Thu Nov 21 15:38:12 2024: Debug: WLAN-AKM-Suite = 1027073
(51) Thu Nov 21 15:38:12 2024: Debug: Eltex-AP-Domain = "with-gre"
(51) Thu Nov 21 15:38:12 2024: Debug: Framed-MTU = 1400
(51) Thu Nov 21 15:38:12 2024: Debug: EAP-Message = 0x024e002e19001703030023f8975c28e091e732883ca2d06dc3ca29c0cd107d25060443fde1b3547ef8345092780d
(51) Thu Nov 21 15:38:12 2024: Debug: State = 0xe972c5d8ee3cdca62745240ad035bf82
(51) Thu Nov 21 15:38:12 2024: Debug: Message-Authenticator = 0x6772704783a0e9f5592c63afe8b7a042
(51) Thu Nov 21 15:38:12 2024: Debug: Restoring &session-state
(51) Thu Nov 21 15:38:12 2024: Debug: &session-state:Framed-MTU = 1004
(51) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Cipher-Suite = "ECDHE-RSA-AES256-GCM-SHA384"
(51) Thu Nov 21 15:38:12 2024: Debug: &session-state:TLS-Session-Version = "TLS 1.2"
(51) Thu Nov 21 15:38:12 2024: Debug: &session-state:Module-Failure-Message := "mschap: MS-CHAP2-Response is incorrect"
(51) Thu Nov 21 15:38:12 2024: Debug: # Executing section authorize from file /etc/raddb/sites-enabled/_default
(51) Thu Nov 21 15:38:12 2024: Debug: authorize {
(51) Thu Nov 21 15:38:12 2024: Debug: policy filter_username {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) -> TRUE
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ / /) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@[^@]*@/ ) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.\./ ) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
(51) Thu Nov 21 15:38:12 2024: Debug: if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /\.$/) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&User-Name =~ /@\./) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: } # if (&User-Name) = notfound
(51) Thu Nov 21 15:38:12 2024: Debug: } # policy filter_username = notfound
(51) Thu Nov 21 15:38:12 2024: Debug: [preprocess] = ok
(51) Thu Nov 21 15:38:12 2024: Debug: [chap] = noop
(51) Thu Nov 21 15:38:12 2024: Debug: [mschap] = noop
(51) Thu Nov 21 15:38:12 2024: Debug: [digest] = noop
(51) Thu Nov 21 15:38:12 2024: Debug: suffix: Checking for suffix after "@"
(51) Thu Nov 21 15:38:12 2024: Debug: suffix: No '@' in User-Name = "tester", looking up realm NULL
(51) Thu Nov 21 15:38:12 2024: Debug: suffix: No such realm "NULL"
(51) Thu Nov 21 15:38:12 2024: Debug: [suffix] = noop
(51) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry DEFAULT at line 1
(51) Thu Nov 21 15:38:12 2024: Debug: files_multi: users: Matched entry tester at line 5
(51) Thu Nov 21 15:38:12 2024: Debug: [files_multi] = ok
(51) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&reply:Eltex-Tls-Enabled == 1) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: else {
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent EAP Response (code 2) ID 78 length 46
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Continuing tunnel setup
(51) Thu Nov 21 15:38:12 2024: Debug: [eap] = ok
(51) Thu Nov 21 15:38:12 2024: Debug: } # else = ok
(51) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (ok) -> TRUE
(51) Thu Nov 21 15:38:12 2024: Debug: if (ok) {
(51) Thu Nov 21 15:38:12 2024: Debug: return
(51) Thu Nov 21 15:38:12 2024: Debug: } # if (ok) = ok
(51) Thu Nov 21 15:38:12 2024: Debug: } # authorize = ok
(51) Thu Nov 21 15:38:12 2024: Debug: Found Auth-Type = eap
(51) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(51) Thu Nov 21 15:38:12 2024: Debug: authenticate {
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Expiring EAP session with state 0xe972c5d8ee3cdca6
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Finished EAP session with state 0xe972c5d8ee3cdca6
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Previous EAP request found for state 0xe972c5d8ee3cdca6, released from the list
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Peer sent packet with method EAP PEAP (25)
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Calling submodule eap_peap to process data
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: (TLS) EAP Done initial handshake
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Session established. Decoding tunneled attributes
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: PEAP state send tlv failure
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Received EAP-TLV response
(51) Thu Nov 21 15:38:12 2024: ERROR: eap_peap: The users session was previously rejected: returning reject (again.)
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: This means you need to read the PREVIOUS messages in the debug output
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: to find out the reason why the user was rejected
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: Look for "reject" or "fail". Those earlier messages will tell you
(51) Thu Nov 21 15:38:12 2024: Debug: eap_peap: what went wrong, and how to fix the problem
(51) Thu Nov 21 15:38:12 2024: ERROR: eap: Failed continuing EAP PEAP (25) session. EAP sub-module failed
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Sending EAP Failure (code 4) ID 78 length 4
(51) Thu Nov 21 15:38:12 2024: Debug: eap: Failed in EAP select
(51) Thu Nov 21 15:38:12 2024: Debug: [eap] = invalid
(51) Thu Nov 21 15:38:12 2024: Debug: } # authenticate = invalid
(51) Thu Nov 21 15:38:12 2024: Debug: Failed to authenticate the user <<<-------------------------------------------------------------------------------- Пользователь не прошел аутентификацию
(51) Thu Nov 21 15:38:12 2024: Debug: Using Post-Auth-Type Reject
(51) Thu Nov 21 15:38:12 2024: Debug: # Executing group from file /etc/raddb/sites-enabled/_default
(51) Thu Nov 21 15:38:12 2024: Debug: Post-Auth-Type REJECT {
(51) Thu Nov 21 15:38:12 2024: Debug: attr_filter.access_reject: EXPAND %{User-Name}
(51) Thu Nov 21 15:38:12 2024: Debug: attr_filter.access_reject: --> tester
(51) Thu Nov 21 15:38:12 2024: Debug: attr_filter.access_reject: Matched entry DEFAULT at line 11
(51) Thu Nov 21 15:38:12 2024: Debug: [attr_filter.access_reject] = updated
(51) Thu Nov 21 15:38:12 2024: Debug: [eap] = noop
(51) Thu Nov 21 15:38:12 2024: Debug: policy remove_reply_message_if_eap {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&reply:EAP-Message && &reply:Reply-Message) {
(51) Thu Nov 21 15:38:12 2024: Debug: if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
(51) Thu Nov 21 15:38:12 2024: Debug: else {
(51) Thu Nov 21 15:38:12 2024: Debug: [noop] = noop
(51) Thu Nov 21 15:38:12 2024: Debug: } # else = noop
(51) Thu Nov 21 15:38:12 2024: Debug: } # policy remove_reply_message_if_eap = noop
(51) Thu Nov 21 15:38:12 2024: Debug: } # Post-Auth-Type REJECT = updated
(51) Thu Nov 21 15:38:12 2024: Debug: Delaying response for 1.000000 seconds
(51) Thu Nov 21 15:38:13 2024: Debug: Sending delayed response
(51) Thu Nov 21 15:38:13 2024: Debug: Sent Access-Reject Id 49 from 100.129.58.1:1812 to 100.129.56.1:37236 length 44 <<<-------------------------------------------------------------------------------- Acess-Reject
(51) Thu Nov 21 15:38:13 2024: Debug: EAP-Message = 0x044e0004
(51) Thu Nov 21 15:38:13 2024: Debug: Message-Authenticator = 0x00000000000000000000000000000000
(43) Thu Nov 21 15:38:14 2024: Debug: Cleaning up request packet ID 41 with timestamp +9048
(44) Thu Nov 21 15:38:14 2024: Debug: Cleaning up request packet ID 42 with timestamp +9048
(45) Thu Nov 21 15:38:14 2024: Debug: Cleaning up request packet ID 43 with timestamp +9048
(46) Thu Nov 21 15:38:14 2024: Debug: Cleaning up request packet ID 44 with timestamp +9048
(47) Thu Nov 21 15:38:17 2024: Debug: Cleaning up request packet ID 45 with timestamp +9051
(48) Thu Nov 21 15:38:17 2024: Debug: Cleaning up request packet ID 46 with timestamp +9051
(49) Thu Nov 21 15:38:17 2024: Debug: Cleaning up request packet ID 47 with timestamp +9051
(50) Thu Nov 21 15:38:17 2024: Debug: Cleaning up request packet ID 48 with timestamp +9051
(51) Thu Nov 21 15:38:17 2024: Debug: Cleaning up request packet ID 49 with timestamp +9051 |
...
Сохранение вывода в файл на flash:data/ и
...
выгрузка по tftp
| Блок кода | ||
|---|---|---|
| ||
wlc-15(debug)# show radius-debug username tester timeout 600 file flash:data/radius_debug.txt Total lines written: 2678 File saved wlc-15(debug)# end wlc-15# copy flash:data/radius_debug.txt tftp://100.110.0.214:/radius_debug.txt |******************************************| 100% (210kB) Success! |
...
Сохранение вывода в файл на внешний USB
| Блок кода | ||
|---|---|---|
| ||
wlc-15(debug)# show radius-debug username tester timeout 600 file usb://103F-2D94:/test_radius_debug_usb.txt Total lines written: 1329 File saved wlc-15(debug)# end wlc-15# show storage-devices usb Name Filesystem Total, MB Used, MB Free, MB ------------------------------ ---------- ---------- ---------- ---------- 103F-2D94 vfat 7771.80 834.25 6937.55 wlc-15# dir usb://103F-2D94:/ Name Type Size Last modified ---------------------------------------------------------- ---------- -------- -- ------------------------- test_radius_debug_usb.txt File 105.24 KB Thu Nov 21 16:44:22 2024 |
...