forum.bitel.ru http://forum.bitel.ru/ |
|
[6.0] Accounting отбривает пакеты (при fromAccept) http://forum.bitel.ru/viewtopic.php?f=44&t=12355 |
Страница 1 из 1 |
Автор: | oldb0y [ 03 апр 2017, 11:31 ] |
Заголовок сообщения: | [6.0] Accounting отбривает пакеты (при fromAccept) |
Хочу реализовать ограниченный доступ, но по какой-то причине Accounting игнорирует данную опцию. Access пропускает абонента и передает в Accounting. Где Accounting решает, что абонент заблокирован и вобще средств нет (Found error 10 и 12) и тут же шлет сигнал закрыть доступ. Что я упускаю? Далее собственно цикл жизни "сесссии" и конфиг Access: Код: radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] RadiusListenerWorker - REQUEST: Packet type: Access-Request Identifier: 33 Authenticator: {6C 8A 96 BF D1 D2 D5 97 42 AB 00 AA C1 CE 66 80} Attributes: User-Name=192.168.167.10 .... radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS: Packet type: Access-Request Identifier: 33 Authenticator: {6C 8A 96 BF D1 D2 D5 97 42 AB 00 AA C1 CE 66 80} Attributes: User-Name=192.168.167.10 .... radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetNas - Search by username=192.168.167.10 radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetNas - Search by address=192.168.167.10 radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - [username=192.168.167.10] Authenticated as inetServId:3 radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetApplication - inetServ[id=3] deviceState not active (accessCode=0). radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - Write new waiting connection to DB radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - New connection id=579 radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - Return code=0 radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetConnectionKeyMap - Put auth accept [IpAddress:null] radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS: Packet type: Access-Accept Identifier: 33 Authenticator: {} Attributes: Acct-Interim-Interval=60 Reply-Message=10 cisco-avpair=subscriber:accounting-list=TALL-SUB cisco-SSG-Account-Info=ASERVICE-TRUSTED cisco-SSG-Account-Info=ALOCAL-L4R Process time auth: 7 radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusListenerWorker - RESPONSE: Packet type: Access-Accept Identifier: 33 Authenticator: {07 F4 3C 03 52 60 D5 E4 5C 34 FA CC 35 D2 C5 F1} Attributes: Acct-Interim-Interval=60 Reply-Message=10 cisco-avpair=subscriber:accounting-list=TALL-SUB cisco-SSG-Account-Info=ASERVICE-TRUSTED cisco-SSG-Account-Info=ALOCAL-L4R Process time auth: 10 Accounting: Код: radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] RadiusListenerWorker - REQUEST: Packet type: Accounting-Request Identifier: 70 Authenticator: {A2 27 E3 06 BF F4 B8 B5 8E 76 DD 11 09 41 70 B9} Attributes: User-Name=192.168.167.10 ... radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS: Packet type: Accounting-Request Identifier: 70 Authenticator: {A2 27 E3 06 BF F4 B8 B5 8E 76 DD 11 09 41 70 B9} Attributes: User-Name=192.168.167.10 ... radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetNas - Search by username=192.168.167.10 radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetNas - Search by address=192.168.167.10 radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetRadiusProcessor - Creating NasConnection from radius accounting packet radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetRadiusProcessor - Parent: null radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetApplication - TariffOptionMap: {} radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetApplication - OptionSet: [1, 5, 9] radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] Accounting - Write new connection to DB radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] Accounting - New connection id=580 radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] Accounting - Write new session to DB radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] Accounting - New session's id=337 radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] connection - 580:337 Register ip: 192.168.167.10 radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] InetConnectionKeyMap - Put connection add 192.168.167.10 radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] RadiusListenerWorker - RESPONSE: Packet type: Accounting-Response Identifier: 70 Authenticator: {9F 5B 1D 34 94 39 BB 62 42 AD 92 44 9D 8A 43 CB} Attributes: Process time start: 19 accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] SessionTarifficationManager - InetOptionSet: [9, 1, 5] accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] connection - 578:336 Found error 12 accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] connection - 578:336 Already sent event to stop session. accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] SessionTarifficationWorker - Tarifficated 1 sessions for 1 ms. accounting 03-31/16:05:26 INFO [accwrkr-2-p-11-t-1] SessionFlushingWorker - Flushed 1 sessions for 10(7) ms. accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] connection - 578:336 Finish stopped call connection by sessionFinishTimeout accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] connection - 578:336 Finishing call session with lastActive=Fri Mar 31 16:05:28 KGT 2017 accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] Accounting - Finishing session 336 accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] connection - 578:336 Unregister ip: 192.168.167.10 accounting 03-31/16:05:28 INFO [accwrkr-1-p-12-t-1] InetApplication - inetServ[id=3] deviceState not active (accessCode=0). accounting 03-31/16:05:28 INFO [accwrkr-1-p-12-t-1] connection - 580:337 Found error 10 accounting 03-31/16:05:28 INFO [accwrkr-1-p-12-t-1] connection - 580:337 Sending event to stop session... Config: Код: connection.close.timeout.forceClose=1
connection.start.fromAccept=1 nas.radius.address.fromRequest=1 nas.radius.connection.attributes=Acct-Session-Id,User-Name,Framed-IP-Address nas.radius.disable.accessCodes=10,12 nas.radius.disable.attributes=Acct-Interim-Interval=60;cisco-avpair=subscriber:accounting-list=TALL-SUB;cisco-ssg-account-info=ASERVICE-TRUSTED;cisco-ssg-account-info=ALOCAL-L4R nas.radius.disable.mode=1 radius.address.fromRequest=1 radius.disable.accessCodes=10,12 radius.disable.attributes=Acct-Interim-Interval=60;cisco-avpair=subscriber:accounting-list=TALL-SUB;cisco-ssg-account-info=ASERVICE-TRUSTED;cisco-ssg-account-info=ALOCAL-L4R radius.disable.mode=1 sa.radius.connection.attributes=Acct-Session-Id,User-Name,Framed-IP-Address sa.radius.connection.close.mode=3 sa.radius.connection.close.removeFromKeyMap=0 sa.radius.connection.coa.mode=2 sa.radius.connection.stateModify=0 sa.radius.connection.withoutBreak=0 |
Автор: | oldb0y [ 03 апр 2017, 13:19 ] |
Заголовок сообщения: | Re: [6.0] Accounting отбривает пакеты (при fromAccept) |
Тему на заморозку, но пока не закрывать NASка в ответ генерирует новый Acct-Session-Id, я так понимаю поэтому состояние и не определяется.. |
Автор: | Amir [ 03 апр 2017, 15:57 ] |
Заголовок сообщения: | Re: [6.0] Accounting отбривает пакеты (при fromAccept) |
Если настройки NAS не помогут - отключите отправку Acct-Session-Id в Access-Request или вырежите его из Access-Request предобработкой. При условии, что если есть Nas-Port - он одинаковый в Access-Request и Accounting-Start. |
Страница 1 из 1 | Часовой пояс: UTC + 5 часов [ Летнее время ] |
Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |