forum.bitel.ru
http://forum.bitel.ru/

Cisco asr ipoe
http://forum.bitel.ru/viewtopic.php?f=44&t=12132		 Страница 1 из 1
Автор:  lumen [ 29 ноя 2016, 11:20 ]
Заголовок сообщения:  Cisco asr ipoe
Добрый день!
Настраиваем связку asr1001x в связке с bgbilling, dhcp relay у нас на коммутаторе. То есть имеем две сессии. DHCP и radius.
Обе сесси подняты в монитре.
Возникает проблема с отправкой coa периодически, делаем абоненту приход -100 чтобы проверить как ему там навешиваются сервисы с
log all.log
Код:
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorSet - Connecting to device
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorDeviceWorker - Do task deviceId: 13; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 13; inetServId: 24; connectionId: 0; state: 0; accessCode: 12; timestamp: 1480396411901
connection 11-29/08:13:31  INFO [sa-p-13-t-6] InetApplication - TariffOptionMap: {}
connection 11-29/08:13:31  INFO [sa-p-13-t-6] InetApplication - inetServ[id=24] balance is out of limit: -1.33 [0]
connection 11-29/08:13:31  INFO [sa-p-13-t-6] InetApplication - TariffOptionMap: {}
connection 11-29/08:13:31  INFO [sa-p-13-t-6] InetApplication - OptionSet: [19]
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorDeviceWorker - Command result event: ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorDeviceWorker - Processing deviceId:13; command ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorSet - Invoking serviceModify
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorDeviceWorker - Process event type[2] result=true
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorDeviceWorker - Changing InetServ:24 state and/or options
connection 11-29/08:13:31  INFO [sa-p-13-t-6] ServiceActivatorDeviceWorker - Do task deviceId: 13; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 13; inetServId: 24; connectionId: 0; state: 0; accessCode: 12; timestamp: 1480396411912
mq 11-29/08:13:31  INFO [event-proc-p-2-t-1] InetServRuntimeMap - Caught event: Event[ru.bitel.bgbilling.modules.inet.access.event.InetServDeviceStateAndOptionsModifiedEvent] moduleId: 1; pluginId: no; cid: global; scid: -1; userId: -1; deviceId: 13; inetServId: 24; state: 0; optionSet: ; timestamp: 1480396411992
connection 11-29/08:13:32  INFO [sa-p-13-t-6] ServiceActivatorSet - Disconnecting from device
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorSet - Connecting to device
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorDeviceWorker - Do task deviceId: 13; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 13; inetServId: 24; connectionId: 316; state: 0; accessCode: 12; timestamp: 1480396419452
connection 11-29/08:13:39  INFO [sa-p-13-t-58] InetApplication - TariffOptionMap: {}
connection 11-29/08:13:39  INFO [sa-p-13-t-58] InetApplication - OptionSet: [19]
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorDeviceWorker - Command result event: ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorDeviceWorker - Processing deviceId:13; command ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorSet - Invoking connectionModify
connection 11-29/08:13:39  INFO [sa-p-13-t-58] AbstractRadiusServiceActivator - Connection modify CoA: oldState: 1; newState: 0; oldOptionSet: [19]; newOptionSet: [19]
connection 11-29/08:13:39  INFO [sa-p-13-t-58] AbstractRadiusServiceActivator - Send CoA lock:
Packet type: CoA-Request
Identifier: 1
Authenticator: {C7 90 14 2A E1 D2 8F AE 2A 63 41 C4 08 73 A5 A1}
Attributes:
  Acct-Session-Id=b065a97a

connection 11-29/08:13:39  INFO [sa-p-13-t-58] RadiusClient - Sending to /10.100.100.2:3799
Packet type: CoA-Request
Identifier: 1
Authenticator: {C7 90 14 2A E1 D2 8F AE 2A 63 41 C4 08 73 A5 A1}
Attributes:
  Acct-Session-Id=b065a97a

connection 11-29/08:13:39  INFO [sa-p-13-t-58] DatagramChannelListener - ru.bitel.bgbilling.kernel.network.radius.RadiusClient$RadiusDatagramChannelListener socket init ok.
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorDeviceWorker - Process event type[2] result=true
connection 11-29/08:13:39  INFO [rds-clnt-/10.100.100.2-3799] RadiusClient - Recieved from /10.100.100.2:3799
Packet type: CoA-NAK
Identifier: 1
Authenticator: {D6 B5 B8 58 F5 86 B9 60 5D E5 3C E2 7D 9A 13 D6}
Attributes:
  Reply-Message=No valid Session
  Error-Cause=405

connection 11-29/08:13:39  INFO [sa-p-13-t-141] ServiceActivatorSet - Connecting to device
connection 11-29/08:13:39  INFO [sa-p-13-t-141] ServiceActivatorDeviceWorker - Do task deviceId: 3; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 3; inetServId: 24; connectionId: 317; state: 0; accessCode: 12; timestamp: 1480396419471
connection 11-29/08:13:39  INFO [sa-p-13-t-141] InetApplication - TariffOptionMap: {}
connection 11-29/08:13:39  INFO [sa-p-13-t-141] InetApplication - OptionSet: [19]
connection 11-29/08:13:39  INFO [sa-p-13-t-141] ServiceActivatorDeviceWorker - Command result event: ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/08:13:39  INFO [sa-p-13-t-141] ServiceActivatorDeviceWorker - Processing deviceId:3; command ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/08:13:39  INFO [sa-p-13-t-141] ServiceActivatorSet - Invoking connectionModify
connection 11-29/08:13:39  INFO [sa-p-13-t-141] AbstractRadiusServiceActivator - Connection modify CoA: oldState: 1; newState: 0; oldOptionSet: [19]; newOptionSet: [19]
connection 11-29/08:13:39  INFO [sa-p-13-t-141] AbstractRadiusServiceActivator - Send CoA lock:
Packet type: CoA-Request
Identifier: 1
Authenticator: {7B FC D8 48 AF 71 61 85 10 21 35 0C B8 4C 60 72}
Attributes:
  Acct-Session-Id=00043F0C

connection 11-29/08:13:39  INFO [sa-p-13-t-141] RadiusClient - Sending to /10.100.100.2:3799
Packet type: CoA-Request
Identifier: 1
Authenticator: {7B FC D8 48 AF 71 61 85 10 21 35 0C B8 4C 60 72}
Attributes:
  Acct-Session-Id=00043F0C

connection 11-29/08:13:39  INFO [sa-p-13-t-141] DatagramChannelListener - ru.bitel.bgbilling.kernel.network.radius.RadiusClient$RadiusDatagramChannelListener socket init ok.
connection 11-29/08:13:39  INFO [sa-p-13-t-141] ServiceActivatorDeviceWorker - Process event type[2] result=true
connection 11-29/08:13:39  INFO [rds-clnt-/10.100.100.2-3799] RadiusClient - Recieved from /10.100.100.2:3799
Packet type: CoA-NAK
Identifier: 1
Authenticator: {6B 07 26 D9 64 B3 F2 A1 68 1B 9E 8E 83 33 CF 15}
Attributes:
  cisco-SSG-Command-Code=\0x10

connection 11-29/08:13:39  INFO [sa-p-13-t-58] EventWorker - Future is done
connection 11-29/08:13:39  WARN [sa-p-13-t-58] ServiceActivatorDeviceWorker - Task return false
connection 11-29/08:13:39  INFO [sa-p-13-t-58] ServiceActivatorSet - Disconnecting from device
connection 11-29/08:13:40  INFO [sa-p-13-t-141] EventWorker - Future is done
connection 11-29/08:13:40  WARN [sa-p-13-t-141] ServiceActivatorDeviceWorker - Task return false
connection 11-29/08:13:40  INFO [sa-p-13-t-141] ServiceActivatorSet - Disconnecting from device


Вложения:
abon0.jpg
abon0.jpg [ 201.07 КБ | Просмотров: 4183 ]
abon1.jpg
abon1.jpg [ 386.59 КБ | Просмотров: 4183 ]
monitor1.jpg
monitor1.jpg [ 263.63 КБ | Просмотров: 4183 ]
Автор:  lumen [ 29 ноя 2016, 11:46 ]
Заголовок сообщения:  Re: Cisco asr ipoe
Возникает еще попутно вопрос, а нельзя сессию отключать не по Actt-session-id, а этими атрибутами
User-Name=\"10.106.99.1\",Cisco-Account-Info=\"10.106.99.1",\cisco-avpair+=\"subscriber:command=account-logoff\"
Автор:  Amir [ 29 ноя 2016, 16:34 ]
Заголовок сообщения:  Re: Cisco asr ipoe
У вас в типе устройства указан CoAServiceActivator, а нужен ISGServiceActivator.

Какие атрибуты, идентифицирующие соединение, передаются в CoA, указывается в параметре
sa.radius.connection.attributes=Acct-Session-Id, User-Name
Но Cisco-Account-Info там нельзя указать.
Автор:  lumen [ 29 ноя 2016, 18:34 ]
Заголовок сообщения:  Re: Cisco asr ipoe
А обработчик процессора протокола ISGProtocolHandler ?
Автор:  Amir [ 29 ноя 2016, 18:45 ]
Заголовок сообщения:  Re: Cisco asr ipoe
Да.
Автор:  lumen [ 29 ноя 2016, 19:08 ]
Заголовок сообщения:  Re: Cisco asr ipoe
Теперь у меня при понижение баланс ниже лимита ничего не происходит
Код:
radius 11-29/15:45:17  INFO [hrlydtlggr-p-7-t-1] HourlyDataLoggerTracker - Checking data log files to close [hours=2]...
radius 11-29/15:45:17  INFO [hrlydtlggr-p-7-t-1] HourlyDataLoggerTracker - Remove dataLog file from writers map [/opt/bgbilling/inet-ipoe/BGInetAccess/data/radius/source_3/2016/2016-11/2016-11-29/log_2016-11-29-15.003.bgdl]
dhcp 11-29/15:45:17  INFO [hrlydtlggr-p-9-t-1] HourlyDataLoggerTracker - Checking data log files to close [hours=1]...
radius 11-29/15:45:19  INFO [hrlydtlggr-p-7-t-1] HourlyDataLoggerTracker - Close dataLog file [/opt/bgbilling/inet-ipoe/BGInetAccess/data/radius/source_3/2016/2016-11/2016-11-29/log_2016-11-29-15.003.bgdl]
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorSet - Connecting to device
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorDeviceWorker - Do task deviceId: 13; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 13; inetServId: 24; connectionId: 0; state: 0; accessCode: 12; timestamp: 1480423561987
connection 11-29/15:46:02  INFO [sa-p-13-t-28] InetApplication - TariffOptionMap: {}
connection 11-29/15:46:02  INFO [sa-p-13-t-28] InetApplication - inetServ[id=24] balance is out of limit: -1.33 [0]
connection 11-29/15:46:02  INFO [sa-p-13-t-28] InetApplication - TariffOptionMap: {}
connection 11-29/15:46:02  INFO [sa-p-13-t-28] InetApplication - OptionSet: [19]
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorDeviceWorker - Command result event: ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorDeviceWorker - Processing deviceId:13; command ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorSet - Invoking serviceModify
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorDeviceWorker - Process event type[2] result=true
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorDeviceWorker - Changing InetServ:24 state and/or options
mq 11-29/15:46:02  INFO [event-proc-p-2-t-1] InetServRuntimeMap - Caught event: Event[ru.bitel.bgbilling.modules.inet.access.event.InetServDeviceStateAndOptionsModifiedEvent] moduleId: 1; pluginId: no; cid: global; scid: -1; userId: -1; deviceId: 13; inetServId: 24; state: 0; optionSet: ; timestamp: 1480423562031
connection 11-29/15:46:02  INFO [sa-p-13-t-28] ServiceActivatorSet - Disconnecting from device
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ServiceActivatorSet - Connecting to device
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ServiceActivatorDeviceWorker - Do task deviceId: 3; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 3; inetServId: 24; connectionId: 325; state: 0; accessCode: 12; timestamp: 1480423577763
connection 11-29/15:46:17  INFO [sa-p-13-t-88] InetApplication - TariffOptionMap: {}
connection 11-29/15:46:17  INFO [sa-p-13-t-88] InetApplication - OptionSet: [19]
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ServiceActivatorDeviceWorker - Command result event: ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ServiceActivatorDeviceWorker - Processing deviceId:3; command ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ServiceActivatorSet - Invoking connectionModify
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ISGServiceActivator - Connection modify: oldState: 1; newState: 0; oldOptionSet: [19]; newOptionSet: [19]
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ISGServiceActivator - Not found ISG service for Inet option: 19
connection 11-29/15:46:17  INFO [sa-p-13-t-88] ServiceActivatorDeviceWorker - Process event type[2] result=true
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ServiceActivatorSet - Connecting to device
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ServiceActivatorDeviceWorker - Do task deviceId: 13; Event[ru.bitel.bgbilling.modules.inet.access.sa.event.InetSaStateModifyEvent] moduleId: 1; pluginId: no; cid: 3; scid: -1; userId: 0; deviceId: 13; inetServId: 24; connectionId: 324; state: 0; accessCode: 12; timestamp: 1480423577740
connection 11-29/15:46:17  INFO [sa-p-13-t-93] InetApplication - TariffOptionMap: {}
connection 11-29/15:46:17  INFO [sa-p-13-t-93] InetApplication - OptionSet: [19]
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ServiceActivatorDeviceWorker - Command result event: ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ServiceActivatorDeviceWorker - Processing deviceId:13; command ServiceActivatorEvent type=2; inetServId: 24; call: true; oldState: 1; newState: 0; oldOptionSet: 19; newOptionSet: 19
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ServiceActivatorSet - Invoking connectionModify
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ISGServiceActivator - Connection modify: oldState: 1; newState: 0; oldOptionSet: [19]; newOptionSet: [19]
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ISGServiceActivator - Not found ISG service for Inet option: 19
connection 11-29/15:46:17  INFO [sa-p-13-t-93] ServiceActivatorDeviceWorker - Process event type[2] result=true
connection 11-29/15:46:18  INFO [sa-p-13-t-88] ServiceActivatorSet - Disconnecting from device
connection 11-29/15:46:18  INFO [sa-p-13-t-93] ServiceActivatorSet - Disconnecting from device
radius 11-29/15:48:47  INFO [rdsLstnr-p-8-t-11] RadiusListenerWorker - REQUEST:
Packet type: Access-Request


Хотя в radius.disable.12.attributes - код 12 недостаточно денег, прописано.
Код:
radius.disable.12.attributes=Acct-Interim-Interval=60;cisco-avpair=subscriber:accounting-list=AAA_LIST_IPOE;cisco-SSG-Account-Info=AFWPOL_NEGBAL_TRUSTED;cisco-SSG-Account-Info=AFWPOL_NEGBAL_REDIRECT



Я предполагал что сервисы должны закрыться которые отдаются в
Код:
radius.realm.default.attributes=Acct-Interim-Interval=600;Idle-Timeout=4200;cisco-avpair=subscriber:accounting-list=AAA_LIST_IPOE; cisco-SSG-Account-Info=AFWPOL_NOSHAPE;cisco-SSG-Account-Info=AFWPOL_ACCEPT
Автор:  Amir [ 29 ноя 2016, 19:47 ]
Заголовок сообщения:  Re: Cisco asr ipoe
Сервисы ISG должны быть привязаны через опции Inet (которые можно указать в тарифе).
Код:
# Атрибуты, выдаваемые в Access-Accept
radius.realm.default.attributes=Acct-Interim-Interval=600;Idle-Timeout=4200;cisco-avpair=subscriber:accounting-list=AAA_LIST_IPOE;
 
# Радиус атрибуты, выдаваемые при авторизации для сервисов
radius.inetOption.2.attributes=cisco-SSG-Account-Info=AFWPOL_NOSHAPE;
radius.inetOption.3.attributes=cisco-SSG-Account-Info=AFWPOL_ACCEPT;


radius.serviceName.disable=FWPOL_NEGBAL_TRUSTED, FWPOL_NEGBAL_REDIRECT

Тогда при нехватке средств Inet отключит активные опции-сервисыISG и включит сервисы, прописанные в radius.serviceName.disable.

Также, при наличии аккаунтинга по сервисам, прописанным в radius.serviceName.disable "состояние" сессии в биллинге сменится с "подключена" на "отключена" (т.е. доступ ограничен).
Автор:  lumen [ 30 ноя 2016, 10:49 ]
Заголовок сообщения:  Re: Cisco asr ipoe
Спасибо, помогло , сервисы NEGBAL навесились, но только не снялись два сервиса.
Код:
AFWPOL_ACCEPT,AFWPOL_NOSHAPE


Опции у меня выглядят вот так.
Код:
radius.inetOption.19.attributes=cisco-SSG-Account-Info=QU;;4000000;;D;;4000000
radius.inetOption.17.attributes=cisco-SSG-Account-Info=AFWPOL_ACCEPT
radius.inetOption.18.attributes=cisco-SSG-Account-Info=AFWPOL_NOSHAPE


лог отключения - log_disable_svc.txt

Вложения:
log_disable_svc.txt [74.02 КБ]
Скачиваний: 462
Страница 1 из 1 Часовой пояс: UTC + 5 часов [ Летнее время ]
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/