Подключение клиента через 802.1x

[underwoodoff]

Не удается подключиться к wifi.
Лог фрирадиуса прилагаю.

rad_recv: Access-Request packet from host 10.255.253.165 port 1024, id=0, length=123
User-Name = "vasya"
NAS-IP-Address = 10.255.253.165
Called-Station-Id = "002354a782c7"
Calling-Station-Id = "689423cec927"
NAS-Identifier = "002354a782c7"
NAS-Port = 32
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x0202000a017661737961
Message-Authenticator = 0x281d4d5e4628e6765e381904c4938485
# Executing section authorize from file /etc/freeradius/sites-enabled/abills_default
+- entering group authorize {...}
++[preprocess] returns ok
Exec-Program output: Cleartext-Password := "123456"
Exec-Program-Wait: value-pairs: Cleartext-Password := "123456"
Exec-Program: returned: 0
++[abills_preauth] returns ok
++[mschap] returns noop
[files] users: Matched entry DEFAULT at line 41
++[files] returns ok
Exec-Program output: Acct-Interim-Interval = 120;, Session-Timeout = 2295465, Framed-IP-Address = 192.168.105.160, Framed-IP-Netmask = 255.255.255.255,
Exec-Program-Wait: plaintext: Acct-Interim-Interval = 120;, Session-Timeout = 2295465, Framed-IP-Address = 192.168.105.160, Framed-IP-Netmask = 255.255.255.255,
Exec-Program: returned: 0
++[abills_auth] returns ok
Found Auth-Type = Accept
Auth-Type = Accept, accepting the user
Login OK: [vasya/<via Auth-Type = Accept>] (from client Asus port 32 cli 689423cec927)
WARNING: Empty post-auth section. Using default return values.
# Executing section post-auth from file /etc/freeradius/sites-enabled/abills_default
Sending Access-Accept of id 0 to 10.255.253.165 port 1024
Finished request 1.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 1 ID 0 with timestamp +1558
Ready to process requests.

вот что написано в секции постаус в /etc/freeradius/sites-enabled/abills_default
post-auth {
Post-Auth-Type REJECT {
abills_postauth
}

Авторизация проходит, а подключиться не удается.
подключаюсь через WPA2 enterprise сертификацию

[~AsmodeuS~]

Acct-Interim-Interval = 120;,

уберите точку с запятой

[underwoodoff]

при настройке 802.1x подключения возникли следующие проблемы:
1) Клиенту не присваивается IP
2)как следствие, не появляется сессия в учетной записи клиента в абиллс
3) при прохождении авторизации возникает много попыток подключения к радиусу!!! radiusd -X выдал аж 9!

wi-fi доступ в интернет появляется, если прописать статический ip. но сессия в абиллс все-равно не появляется, хоть радиус и определяет какой конкретно клиент авторизовался.


Finished request 8.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.105.2 port 1024, id=1, length=174
Cleaning up request 8 ID 1 with timestamp +102
User-Name = "kolya"
NAS-IP-Address = 192.168.105.2
Called-Station-Id = "002354a782c7"
Calling-Station-Id = "689423cec927"
NAS-Identifier = "002354a782c7"
NAS-Port = 32
Framed-MTU = 1400
State = 0x18cdcc3410c4d5e761da5f18f0f9a219
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x0209002b19001703010020e9713b901d1f2026c5c94639c3d23cac0dcce59380a4d9b8fbf63b6e27aac225
Message-Authenticator = 0x49b9e3e32d8c87504aef3a58e887f5cc
# Executing section authorize from file /usr/local/etc/raddb/sites-enabled/abills_default
+- entering group authorize {...}
++[preprocess] returns ok
rlm_perl: Added pair NAS-Port-Type = Wireless-802.11
rlm_perl: Added pair State = 0x18cdcc3410c4d5e761da5f18f0f9a219
rlm_perl: Added pair Calling-Station-Id = 689423cec927
rlm_perl: Added pair Called-Station-Id = 002354a782c7
rlm_perl: Added pair Message-Authenticator = 0x49b9e3e32d8c87504aef3a58e887f5cc
rlm_perl: Added pair User-Name = kolya
rlm_perl: Added pair NAS-Identifier = 002354a782c7
rlm_perl: Added pair EAP-Message = 0x0209002b19001703010020e9713b901d1f2026c5c94639c3d23cac0dcce59380a4d9b8fbf63b6e27aac225
rlm_perl: Added pair NAS-IP-Address = 192.168.105.2
rlm_perl: Added pair NAS-Port = 32
rlm_perl: Added pair Framed-MTU = 1400
rlm_perl: Added pair Acct-Interim-Interval = 60
rlm_perl: Added pair Session-Timeout = 1509897
rlm_perl: Added pair Framed-IP-Address = 192.168.105.210
rlm_perl: Added pair Framed-IP-Netmask = 255.255.255.255
rlm_perl: Added pair Cleartext-Password = 123456
++[perl] returns ok
[eap] EAP packet type response id 9 length 43
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /usr/local/etc/raddb/sites-enabled/abills_default
+- entering group EAP {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established. Decoding tunneled attributes.
[peap] Peap state send tlv success
[peap] Received EAP-TLV response.
[peap] Success
[eap] Freeing handler
++[eap] returns ok
WARNING: Empty post-auth section. Using default return values.
# Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/abills_default
Sending Access-Accept of id 1 to 192.168.105.2 port 1024
Acct-Interim-Interval = 60
Session-Timeout = 1509897
Framed-IP-Address = 192.168.105.210
Framed-IP-Netmask = 255.255.255.255
MS-MPPE-Recv-Key = 0xdf95187e668a3d0c91485a959ff3ad33643853e495d69b52d6a00d84472bba95
MS-MPPE-Send-Key = 0xb0c2f936d7c486de0777306882d66aee6bc269d2a3165ffff8df7cd09fadc005
EAP-Message = 0x03090004
Message-Authenticator = 0x00000000000000000000000000000000
User-Name = "kolya"
Finished request 9.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 9 ID 1 with timestamp +102
Ready to process requests.

tcpdump -ni em1 dst port 1812
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on em1, link-type EN10MB (Ethernet), capture size 96 bytes
14:51:13.773862 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 123
14:51:13.794683 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 240
14:51:13.822268 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 137
14:51:13.852972 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 137
14:51:13.883107 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 469
14:51:13.934753 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 137
14:51:13.953884 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 174
14:51:14.003153 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 238
14:51:14.043285 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 174
14:51:14.083116 IP 192.168.105.2.1024 > 192.168.105.1.1812: RADIUS, Access Reque st (1), id: 0x01 length: 174



Что нужно сделать, чтобы происходила автоматическая выдача адресов из ip pool? как реализовать подсчет траффика и снятие средств клиента?
авторизация логин-пароль. клиент подключен к одному NASу с типом Other NAS server.

[underwoodoff]

компетентных людей нет? неужели никто вайфайку не кидал через абиллс??????????

[underwoodoff]

нужен ли wpa_supplicant??????????

[~AsmodeuS~]

нет не нужен

когда внедряли кучу лет назал пробовали все работало но у нас этот протокол не прижился

[underwoodoff]

нет не нужен

тогда скажите для подключения по 802.1х кроме радиуса какие ещё нужны программы и модули???

ps/модуль vlan у нас не установлен.

[~AsmodeuS~]

вот пример настройки

http://abills.net.ua/wiki/doku.php/abil ... :802.1x:ru