ERR: Attribute number 10 (vendor 3224) is not defined in your dictionary

[bengelly_]

Hello Community,

I have this error that keeps on showing up in my Radius logs each time one of my clients attempts to establish an IPsec VPN connection on one my SSG-140 :

ERR: Attribute number 10 (vendor 3224) is not defined in your dictionary

I have been googling around in order to find this **bleep** attribute but didn't lucky.

Every time, I keep on hiting on the same information again and again no matter what (KB6392):

http://kb.pulsesecure.net/index?page=content&id=KB6392&actp=search&searchid=1240829842142

Has someone been able to kill this one ?

Thank for your help.

Regards.

[muttbarker_]

Good morning - attribute #10 is "Framed-Routing" - it has the following characteristics:

Attribute Number 10, Length 6 Value ENUMAllowed in Access-Accept

Prohibited in Access-Request, Access-Reject, Access-Challenge

Presence in Packet Not required

Maximum Iterations 1

Description: The routing policies of the client connections are set using the value of this attribute. In some cases, clients may act as routers, passing packets to computers and/or connections other than themselves. In these circumstances, the RADIUS client will need to be able to listen to the broadcasts this client router sends out about its route paths.

The values in this attribute, ranging from 0 to 3 and described below depict the broadcast behaviors for the connection in question.

Framed-routing attribute values:

Value - Broadcast policy

0 - None

1 - Broadcast routing tables and notifications

2- Listen for routing notification broadcasts

3 - Broadcast and listen for notifications

Don't know if this is much help but if you google the attribute itself you will get a ton of hits.

[bengelly_]

Hello muttbacker,

Thank you for the tip.

So, if I understand you correctly, I should add the following line to my Radius dictionary :

VENDORATTR 3224 NS-Framed-Routing 10 integer

Am I correct ?

Thanks.

[muttbarker_]

I believe that, that is correct. I am in the field today so don't have any admin access to my boxes. Just relying on notes on my PC so can't do any actual verification.

[bengelly_]

Hello,

Thanks for your help. I'll modify this tomorrrow, so you have some time ahead of you if you wanna send a confirmation.

Good luck on the field, I know what it's like and there is nothing like it

Regards.