RADIUS not working

[isd94]

I have NX filter installed, imported all my AD users and groups, and then set it up as a RADIUS accounting server. Using NTRadPing, I can verify that the NXFilter is indeed receiving RADIUS accounting requests. What I can't figure out is that whenever I login using RADIUS, the NXFilter uses my default user that has an IP range set. If I delete the default user and check "Auto-register for New User", a new user never gets created and all DNS requests are blocked. Obviously I have something setup wrong, but I have no idea what.

[support200]

That's weird. I just tested with my NxFilter and NTRadPing and it works fine. I created a user associating 192.168.0.1 ~ 192.168.0.255 which is my subnet and I enabled 'Auto-register for New User'. When I send a RADIUS accounting message with a new username, it was created on NxFilter and I could see its login session created by accessing http://192.168.0.101/welcome page. 192.168.0.101 is my NxFilter IP.

This is my NTRadiusPing capture image.

[isd94]

I noticed that you included the framed IP address attribute, so I did the same. If I included that, it created a new user, if I didn’t, it did nothing. My best guess is that the framed-ip-address attribute isn’t being sent. I’m using NPS as my RADIUS authentication server, with Unifi Gen-6 APs and the latest version of the controller. For the life of me I can’t see anywhere to control that attribute.

[support200]

I tried to search some info about your problem. It seems like there are some users talking about Unifi not sending Framed-IP-Address in its RADIUS accounting packet. https://community.ui.com/questions/N...0-d0bdda325638

We also tested this feature with a Unifi router several years ago. We didn't do any special settings. In my memory, Framed-IP-Address was sent once when a user logged in. So, its type is 'Accounting Start'. Did you try something like Wireshark to see inside the packet? You may need to look into the packet to confirm if there's no Framed-IP-Address attribute. If it's there with another name, we may help you with that.