NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Insight - RADIUS attribute bug - External Captive Portal
Hi,
I am from Purple Wifi - we are a Guest WiFi service provider offering external captive portal and RADIUS solutions.
We've recently been asked by a customer to integrate our solution with NETGEAR Insight.
We've configured the captive portal setting as per
https://kb.netgear.com/000066743/How-do-I-set-up-an-Insight-External-Captive-Portal-service and everything is working, except that when the AP makes the RADIUS request to the RADIUS server, it's missing some basic/crucial attributes.
We can see the following in the Access-Request:
Access-Request Id 0 ens4:51.7.213.100:57854 -> 10.210.63.147:1812 +9.011
User-Name = "2-3599a6f342d645c89d6741386daf936f-form@195dff"
User-Password = "..."
NAS-IP-Address = 192.168.1.149
NAS-Identifier = "14:59:c0:28:xx:xx"
Message-Authenticator = 0xf3df60664dc768f4271309e6651ba6db
However, as per RFC 2865, all RADIUS Access and Accounting requests should contain the following attributes also:
- Called-Station-Id (MAC of the AP)
- Calling-Station-Id (MAC of the client device)
Without this, the RADIUS server cannot look up the AP or the client, to authorize successfully.
I realize the NAS-Identifier is the MAC of the AP, but the above attributes should be included as a minimum.
Please can this be looked at?
Thanks,
James
1 Reply
Hello James, welcome to the Netgear community.
Insight does just provide an administration and management framework, it's not involved on the Radius access and accounting. Once configured, all this happens direct on the wireless access points.
What Netgear AP models, and what firmware versions are in place?
Not using many APs deployed on the field with Radius - this reads to me like an issue/bug on the access point(s).
I suggest to open a support ticket via https://my.netgear.com/ by the customer, or on behalf of your customer. Unless these AP are relatively new, and are covered under the 120 days of the included initial installation support plan, or your customer has subscribed to the Extended Warranty and Support plan, or a Premium Support plan, the straight access to support goes through the Insight subscription. Depending on the market region, I found the online process troublesome, so crossing my fingers for you managing to open a ticket.
Things become difficult recently here due to community and support platform issues I'm afraid.
In case you can't find your way through the support jungle, contact JulienR via PM.
Regards
-Kurt
PS. Active community member here, not a Netgear rep
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
