Здравствуйте!
Пытаюсь настроить pptp на cisco 7201 с chap-аутентификацией через RADIUS,
Почему то cisco не передаёт радиусу атрибут chap-challenge:
Cisco:
interface Virtual-Template1
description --- PPTP virtual interface
mtu 1460
ip unnumbered Loopback0
no ip redirects
no ip proxy-arp
timeout absolute 1440 0
peer default ip address pool vpdn
keepalive 30
ppp authentication chap radius-XX
ppp authorization radius-XX
ppp ipcp dns X.X.X.X
ppp ipcp mask 255.255.255.255
ppp timeout idle 1200 either
radius-server attribute 44 include-in-access-req
radius-server attribute 44 extend-with-addr
radius-server attribute 8 include-in-access-req
radius-server attribute 32 include-in-accounting-req
radius-server attribute 55 include-in-acct-req
radius-server attribute 25 access-request include
radius-server attribute nas-port format e UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
radius-server attribute 31 send nas-port-detail mac-only
radius-server host X.X.X.X auth-port 1812 acct-port 1813 key 7 XXXXX
radius-server vsa send cisco-nas-port
radius-server vsa send accounting
radius-server vsa send authentication
Radius:
Received Access-Request Id 190 from X.X.X.X:1645 to X.X.X.X:1812 length 133
Framed-Protocol = PPP
User-Name = 'test'
CHAP-Password = 0x01db5e76573cf6928607df2d9edc6705f1
NAS-Port-Type = Virtual
Cisco-NAS-Port = 'Uniq-Sess-ID829'
NAS-Port = 7812519
NAS-Port-Id = 'Uniq-Sess-ID829'
Service-Type = Framed-User
NAS-IP-Address = X.X.X.X
Acct-Session-Id = '59136401007735A7'
tcpdump:
19:24:56.601905 IP (tos 0x0, ttl 254, id 52409, offset 0, flags [none], proto UDP (17), length 163)
X.X.X.X.1645 > X.X.X.X.1812: RADIUS, length: 135
Access Request (1), id: 0xc7, Authenticator: 6c065e85c9983a5b119c79a1d6475e29
Framed Protocol Attribute (7), length: 6, Value: PPP
Username Attribute (1), length: 6, Value: test
CHAP Password Attribute (3), length: 19, Value:
NAS Port Type Attribute (61), length: 6, Value: Virtual
Vendor Specific Attribute (26), length: 24, Value: Vendor: Cisco (9)
Vendor Attribute: 2, Length: 16, Value: Uniq-Sess-ID1398
NAS Port Attribute (5), length: 6, Value: 7813650
NAS Port ID Attribute (87), length: 18, Value: Uniq-Sess-ID1398
Service Type Attribute (6), length: 6, Value: Framed
NAS IP Address Attribute (4), length: 6, Value: X.X.X.X
Accounting Session ID Attribute (44), length: 18, Value: 5913640100773A12
Подскажите пожалуйста в чём может быть проблема...
