OpenWrt Forum Archive

Topic: Somewhat OT: Problem using WRT54GL + OpenWRT wht radius

The content of this topic has been archived on 27 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi,

I am using  WRT54GL AP's  with OpenWRT  as NAS's to a freeradius server running on Linux server.

I am undergoing a repeated non-fatal but very annoying problem that freeradius logs show them as follows:

Tue Nov  4 11:11:00 2008 : Error: Discarding conflicting packet from client Jean Jeaures port 2048 - ID: 0 due to recent request 14483.
Tue Nov  4 11:21:21 2008 : Error: Discarding conflicting packet from client Larrea port 2048 - ID: 2 due to recent request 14563.
Tue Nov  4 11:25:44 2008 : Error: Discarding conflicting packet from client UP-PVIII-VI port 2048 - ID: 0 due to recent request 14618.
Tue Nov  4 11:32:17 2008 : Error: Discarding conflicting packet from client Jean Jeaures port 2048 - ID: 7 due to recent request 14696.
Tue Nov  4 11:32:17 2008 : Error: Discarding conflicting packet from client Jean Jeaures port 2048 - ID: 7 due to recent request 14696.
Tue Nov  4 11:41:46 2008 : Error: Discarding conflicting packet from client Jean Jeaures port 2048 - ID: 7 due to recent request 14797.
Tue Nov  4 11:59:37 2008 : Error: Discarding conflicting packet from client UP-PI-SS port 2048 - ID: 1 due to recent request 14905.
Tue Nov  4 12:22:22 2008 : Error: Discarding conflicting packet from client Jean Jeaures port 2048 - ID: 1 due to recent request 15040.
Tue Nov  4 12:37:10 2008 : Error: Discarding conflicting packet from client Jean Jeaures port 2048 - ID: 1 due to recent request 15203.
Tue Nov  4 12:53:42 2008 : Error: Discarding conflicting packet from client UP-PI-PB port 2048 - ID: 1 due to recent request 15325.

I've asked on freeradius mailing list and I was answered in repeated times that the problem is the NAS.

Some of the nvram variables are (II've changed some of them for obvius reason):

wl0_net_mode=mixed                                                                                                                             
wl0_frameburst=off                                                                                                                             
wl0_wep_buf=                                                                                                                                   
wl0_akm=wpa wpa2                                                                                                                               
wl0_macmode1=disabled                                                                                                                         
wl0_infra=1                                                                                                                                   
wl0_country_code=ALL                                                                                                                           
wl0_wme_sta_be=15 1023 3 0 0 off                                                                                                               
wl0_ifname=eth1                                                                                                                               
wl0_wme_sta_bk=15 1023 7 0 0 off                                                                                                               
wl0_mrate=0                                                                                                                                   
wl0_mode=ap                                                                                                                                   
wl0_ap_isolate=0                                                                                                                               
wl0_gmode=1                                                                                                                                   
wl0_wme_no_ack=off                                                                                                                             
wl0_wep_last=                                                                                                                                 
wl0_ssid=zarlanga                                                                                                                 
wl0_dtim=1                                                                                                                                     
wl0id=0x4320                                                                                                                                   
wl0_key1=                                                                                                                                     
wl0_key2=                                                                                                                                     
wl0_key3=                                                                                                                                     
wl0_key4=                                                                                                                                     
wl0_wme_ap_vi=7 15 1 6016 3008 off                                                                                                             
wl0_closed=0                                                                                                                                   
wl0_rate=0                                                                                                                                     
wl0_plcphdr=long                                                                                                                               
wl0_macmode=disabled                                                                                                                           
wl0_radioids=BCM2050                                                                                                                           
wl0_wme_ap_vo=3 7 1 3264 1504 off                                                                                                             
wl0gpio2=0                                                                                                                                     
wl0_phytype=g                                                                                                                                 
wl0gpio3=0                                                                                                                                     
wl0_lazywds=1                                                                                                                                 
wl0_afterburner=off                                                                                                                           
size: 9784 bytes (22984 left)                                                                                                                 
wl0_antdiv=-1                                                                                                                                 
wl0_wpa_psk=                                                                                                                                   
wl0_mac_list=                                                                                                                                 
wl0_unit=0                                                                                                                                     
wl0_txpwr=248                                                                                                                                 
wl0_net_reauth=36000                                                                                                                           
wl0_wds=                                                                                                                                       
wl0_mac_deny=                                                                                                                                 
wl0_auth=0                                                                                                                                     
wl0_wme=off                                                                                                                                   
wl0_radius_port=1812                                                                                                                           
wl0_radius_ipaddr=111.111.111.111
wl0_wme_sta_vi=7 15 2 6016 3008 off
wl0_wme_sta_vo=3 7 2 3264 1504 off
wl0_maxassoc=128
wl0_phytypes=g
wl0_wep=disabled
wl0_frag=2346
wl0_country=Worldwide
wl0_rateset=default
wl0_wep_bit=64
wl0_passphrase=
wl0_rts=2347
wl0_wpa_gtk_rekey=3600
wl0_key=1
wl0_active_mac=
wl0_radio=1
wl0_bcn=100
wl0_hwaddr=
wl0_wep_gen=
wl0_gmode_protection=off
wl0_maclist=
wl0_radius_key=jejejejeje
wl0_wme_ap_be=15 63 3 0 0 off
wl0_corerev=9
wl0_channel=7
wl0_wds_timeout=1
wl0_wme_ap_bk=15 1023 7 0 0 off
wl0_auth_mode=none
wl0_crypto=tkip+aes
wan_iface=vlan1
os_ram_addr=80001000
log_ipaddr=0
il0macaddr=00:1d:7e:dc:ab:1d
et0macaddr=00:1D:7E:DC:AB:1B
os_flash_addr=bfc40000
lan_hwaddr=
wan_ippaddr=10.128.255.100
wan_hwaddr=
lan_ipaddr=192.168.252.1
dmz_ipaddr=0
wan_ipaddr=10.128.255.100
size: 9784 bytes (22984 left)
et0phyaddr=30
wl0_hwaddr=
dl_ram_addr=a0001000
def_hwaddr=00:00:00:00:00:00
lan_gateway=192.168.252.1
wan_gateway=10.128.0.2

Is there a way to fix the errors shown by radius or should I change of brand/model of AP?

Thanks in advance!

NAS = Network Attached Storage in my world.

What does it mean in yours?

NAS:  http://wiki.freeradius.org/Network_Access_Server

Basically (reading from the Wiki), clients connect to the WRTs (acting as NASs), which then talk to the freeradius server elsewhere.

Not knowing anything about freeradius, all I can assume from this and looking at those logs is that there are multiple requests being generated for some reason, which to me would likely indicate a configuration issue of some sort.

The replies simply saying the problem was the NAS sound extremely unhelpful.  I would have to assume that these replies held more information than what was written here, and would strongly suggest that sebelk reply back asking for additional assistance with what exactly on the NAS might be responsible for such a thing to happen.

A quick search of the forums here for 'freeradius' found 5 pages of hits, so I would have to assume that with a proper config, this should work just fine with OpenWRT.

JimWright wrote:

NAS:  http://wiki.freeradius.org/Network_Access_Server

Basically (reading from the Wiki), clients connect to the WRTs (acting as NASs), which then talk to the freeradius server elsewhere.

Thanks Jim to take the trouble to understand NAS meaning in radius context.

JimWright wrote:

Not knowing anything about freeradius, all I can assume from this and looking at those logs is that there are multiple requests being generated for some reason, which to me would likely indicate a configuration issue of some sort.

The replies simply saying the problem was the NAS sound extremely unhelpful.  I would have to assume that these replies held more information than what was written here, and would strongly suggest that sebelk reply back asking for additional assistance with what exactly on the NAS might be responsible for such a thing to happen.

These are the threads which it is mentioned APs (NAS's) as culprit ones:

http://www.mail-archive.com/freeradius- … 45634.html
http://www.mail-archive.com/freeradius- … 48590.html

I'd be glad if you can help me to fix this problem...

Thanks in advance.

Reading the referenced threads, the general feeling I get is that they don't have a clue what the issue actually is, all they know is that it either works or it doesn't.  Not terribly helpful.

Yes, the firmware will have some similarities to the stock version, since it was built to run on that particular hardware, but the underpinnings are so different, it's hard to believe that it's actually a firmware issue, and may in fact more likely be some hardware issue that the freeradius software isn't compensating for.  Of course, that's just a guess on my part...

It sounds, though, like the errors are more of an annoyance in the logs, and not something that's impacting functionality?  If that's the case, I'd tend to say just put up with the errors, and at some point when the routers get replaced through the usual course of upgrades, that you check with the freeradius list for known good models and implement those instead.

The discussion might have continued from here.