Bonjour,

Après avoir fait plusieurs tentatives et activé quelques debugs, je n'arrive plus à comprendre ce qui ne va pas.

On dirait que la connexion au serveur radius ne se fait pas à partir du routeur (cisco 2600), hors l'auth-proxy se déclenche bien, et en changeant un peu une certaine ligne (que j'expliquerai après), je peux me "logger", mais en utilisant le password enable du routeur... pas très portable comme solution.

Est-ce que quelqu'un pourrait m'aider ?

config du routeur relative au radius :

aaa new-model
!
aaa group server radius rady
server 10.50.34.10 auth-port 1812 acct-port 1813
!
aaa authentication login console none
aaa authentication login radi group rady local
aaa authorization exec radi group rady
aaa authorization auth-proxy default group rady
aaa session-id common
!
ip cef
ip auth-proxy auth-proxy-banner http ^C Qui etes vous ^C
ip auth-proxy inactivity-timer 10
ip auth-proxy name rad http auth-cache-time 4 absolute-timer 30
ip audit po max-events 100
!
interface FastEthernet0/0
ip address 110.50.34.1 255.255.255.0
ip auth-proxy rad
duplex auto
speed auto
!
ip http server
no ip http secure-server
!
access-list 10 permit 110.50.34.0 0.0.0.255
access-list 120 permit tcp 110.50.3.0 0.0.0.255 host 10.50.34.2 eq www
access-list 120 permit udp any any eq 1812
access-list 120 permit udp any any eq 1813
!
!
radius-server host 10.50.34.10 auth-port 1812 acct-port 1813 key test
!

le debug obtenu à l'authentification :

*Mar 7 22:07:53.832: AAA: parse name=FastEthernet0/0 idb type=-1 tty=-1
*Mar 7 22:07:53.832: AAA: name=FastEthernet0/0 flags=0x15 type=12 shelf=0 slot=0 adapter=0 port=0 channel=0
*Mar 7 22:07:53.832: AAA: parse name=<no string> idb type=-1 tty=-1
*Mar 7 22:07:53.832: AAA/MEMORY: create_user (0x838BC680) user='NULL' ruser='NULL' ds0=0 port='FastEthernet0/0' rem_addr='110.50.34.148' authen_type=ASCII service=LOGIN priv=0 initial_task_id='0', vrf= (id=0)
*Mar 7 22:07:53.832: AAA/AUTHEN/START (3993420874): port='FastEthernet0/0' list='default' action=LOGIN service=LOGIN
*Mar 7 22:07:53.836: AAA/AUTHEN/START (3993420874): console login - default to "no auth required"
*Mar 7 22:07:53.836: AAA/AUTHEN/START (3993420874): Method=NONE
*Mar 7 22:07:53.836: AAA/AUTHEN(3993420874): Status=PASS
*Mar 7 22:07:53.836: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): Port='FastEthernet0/0' list='default' service=AUTH-PROXY
*Mar 7 22:07:53.836: AAA/AUTHOR/HTTP: FastEthernet0/0(3847539864) user=''
*Mar 7 22:07:53.836: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): send AV service=auth-proxy
*Mar 7 22:07:53.836: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): send AV cmd*
*Mar 7 22:07:53.836: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): found list "default"
*Mar 7 22:07:53.836: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): Method=rady (radius)
*Mar 7 22:07:53.840: RADIUS: authenticating to get author data
*Mar 7 22:07:53.840: RADIUS: failed to get authorization data: authen status = 4
*Mar 7 22:07:53.840: AAA/AUTHOR (3847539864): Post authorization status = ERROR
*Mar 7 22:07:53.840: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): Method=NOT_SET
*Mar 7 22:07:53.840: FastEthernet0/0 AAA/AUTHOR/HTTP(3847539864): no methods left to try
*Mar 7 22:07:53.840: AAA/AUTHOR (3847539864): Post authorization status = ERROR


Merci.

Poste le Monday 5 March 2007 13:36:07