Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) CACHE-TOKEN+SAFEWORD+RADIUS+Max4000/E1=works?

Hi,

We are trying to get CACHE-TOKEN to work with SAFEWORD & Radius (Ascend or
Secure Computings package of Ascend radius), currently without any luck :-( .


Environment:
------------

Equipment         MAX4000/E1 PRI: 5.0Ap16 (ebom.m40)

                  Pipeline 75:    5.0Ap13 (b.p75)


Workstation SW/HW:                SUN Solaris 2.5.1
                                  SUN Sparcstation

SAFEWORD:                         Version 4.4 

Radius:                           Version 1.16 (plus Ascend extension)
                                  96/10/14. The one packed with the above
                                  SAFEWORD version (whish that they used
                                  proper revision handling etc, not only a
                                  date..)
                             

 

Problem Description:
-------------------- 

First, we have used SAFEWORD(4.3) and Radius (late October 1996 from Enigma)
with analog users for over eight months, and it works ok when using PAP-TOKEN
on the Pipeline too.  We haven't found anything wrong with our setup but who 
knows...

According to our supplier of SAFEWORD, it *should* work if we use  
SAFEWORD 4.4 with the Radius packaged on the same CD, but it doesn't :-(.

When running the radius deamon with the "-c" option, I get prompted for
a "PASSCODE" (When in the Pipeline's "set password" mode) 3 times, and
then the connection is terminated with disconnect cause 43 (CHAP 
authentication failed). I have set the Pipeline's Send PW and the
radius profile Ascend-Receive-Secret to the same "shared-secret".

---------------------------- Begin included text -----------------------------
falk Password = "SAFEWORD", Ascend-Token-Expiry=22
        Ascend-Receive-Secret = "test",
        Class = 6570,
        User-Service = Framed-User,
        Framed-Protocol = MPP,
        Framed-Address = 1nn.1nn.nn.250,
        Framed-Netmask = 255.255.255.0
---------------------------- Begin included text -----------------------------

---------------------------- Begin included text -----------------------------
Fri Aug 22 18:10:21 1997
        NAS-Identifier = 1nn.1nn.nn.16
        NAS-Port = 10209
        Acct-Status-Type = Stop
        Acct-Delay-Time = 0
        Acct-Session-Id = "e525465"
        Ascend-Disconnect-Cause = 43
        Ascend-Connect-Progress = 65
        Ascend-Data-Rate = 64000
        Ascend-PreSession-Time = 6
        Ascend-Pre-Input-Octets = 92
        Ascend-Pre-Output-Octets = 104
        Ascend-Pre-Input-Packets = 4
        Ascend-Pre-Output-Packets = 5
        Caller-Id = "nnnnnnnn"
        Client-Port-DNIS = "nnnnnnnnn"
---------------------------- End of included text ----------------------------




If we try to use the debug ("-x") option to the radius deamon, then we
will not be prompted for a "PASSCODE". We will immediately be disconnected
with a disconnect cause 43. A debug mode that doesn't behave as "normal-
mode" isn't of much use :-(.

I have heard from another company, that they have the same problems that we
have on their MAX4000/E1, but it works on their MAX200!!
Sounds strange, but I believe anything regards to Ascend Software releases...


Any information, suggestions etc are welcome!

Regards Thomas
--
 Thomas Falk Claezon           ERICSSON, AXE Research and Development
 Phone:   +46 8 727 34 12      Box 1505
 Fax:     +46 8 647 82 76      S-125 25 ALVSJO
 Email:   falk@uab.ericsson.se SWEDEN
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>