While working with RADIUS packets, I found that packets with:
Acct-Status-Type: Stop (2)
And:
radius.Acct_Terminate_Cause == 17 (User_Error)
Do not have the framed IP address and MASK of the client (I mean AVPs):
AVP: l=6 t=Framed-IP-Address(8): AND
AVP: l=6 t=Framed-IP-Netmask(9):
I want to know if this is always the case, and if it is "normal behavior".
I looked in the RFC but did not find a response.
finally, i found that those packets are sent when a non allowed subscriber tries to connect.
There are many cases where a subscriber is not allowed to connect, one of them is if his password is not correct.
accourding to RADIUS RFC2866, Acct-Terminate-Cause has 18 possible values:
Best Regards.