Хочу реализовать ограниченный доступ, но по какой-то причине Accounting игнорирует данную опцию. Access пропускает абонента и передает в Accounting. Где Accounting решает, что абонент заблокирован и вобще средств нет (Found error 10 и 12) и тут же шлет сигнал закрыть доступ. Что я упускаю? Далее собственно цикл жизни "сесссии" и конфиг
Access:Код:
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 33
Authenticator: {6C 8A 96 BF D1 D2 D5 97 42 AB 00 AA C1 CE 66 80}
Attributes:
User-Name=192.168.167.10
....
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Access-Request
Identifier: 33
Authenticator: {6C 8A 96 BF D1 D2 D5 97 42 AB 00 AA C1 CE 66 80}
Attributes:
User-Name=192.168.167.10
....
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetNas - Search by username=192.168.167.10
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetNas - Search by address=192.168.167.10
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - [username=192.168.167.10] Authenticated as inetServId:3
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetApplication - inetServ[id=3] deviceState not active (accessCode=0).
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - Write new waiting connection to DB
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - New connection id=579
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - Return code=0
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetConnectionKeyMap - Put auth accept [IpAddress:null]
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Accept
Identifier: 33
Authenticator: {}
Attributes:
Acct-Interim-Interval=60
Reply-Message=10
cisco-avpair=subscriber:accounting-list=TALL-SUB
cisco-SSG-Account-Info=ASERVICE-TRUSTED
cisco-SSG-Account-Info=ALOCAL-L4R
Process time auth: 7
radius 03-31/16:05:15 INFO [rdsLstnr-p-8-t-4] InetRadiusListenerWorker - RESPONSE:
Packet type: Access-Accept
Identifier: 33
Authenticator: {07 F4 3C 03 52 60 D5 E4 5C 34 FA CC 35 D2 C5 F1}
Attributes:
Acct-Interim-Interval=60
Reply-Message=10
cisco-avpair=subscriber:accounting-list=TALL-SUB
cisco-SSG-Account-Info=ASERVICE-TRUSTED
cisco-SSG-Account-Info=ALOCAL-L4R
Process time auth: 10
Accounting:Код:
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] RadiusListenerWorker - REQUEST:
Packet type: Accounting-Request
Identifier: 70
Authenticator: {A2 27 E3 06 BF F4 B8 B5 8E 76 DD 11 09 41 70 B9}
Attributes:
User-Name=192.168.167.10
...
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Accounting-Request
Identifier: 70
Authenticator: {A2 27 E3 06 BF F4 B8 B5 8E 76 DD 11 09 41 70 B9}
Attributes:
User-Name=192.168.167.10
...
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetNas - Search by username=192.168.167.10
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetNas - Search by address=192.168.167.10
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetRadiusProcessor - Creating NasConnection from radius accounting packet
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetRadiusProcessor - Parent: null
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetApplication - TariffOptionMap: {}
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] InetApplication - OptionSet: [1, 5, 9]
radius 03-31/16:05:15 INFO [rdsLstnr-p-7-t-10] Accounting - Write new connection to DB
radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] Accounting - New connection id=580
radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] Accounting - Write new session to DB
radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] Accounting - New session's id=337
radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] connection - 580:337 Register ip: 192.168.167.10
radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] InetConnectionKeyMap - Put connection add 192.168.167.10
radius 03-31/16:05:16 INFO [rdsLstnr-p-7-t-10] RadiusListenerWorker - RESPONSE:
Packet type: Accounting-Response
Identifier: 70
Authenticator: {9F 5B 1D 34 94 39 BB 62 42 AD 92 44 9D 8A 43 CB}
Attributes:
Process time start: 19
accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] SessionTarifficationManager - InetOptionSet: [9, 1, 5]
accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] connection - 578:336 Found error 12
accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] connection - 578:336 Already sent event to stop session.
accounting 03-31/16:05:19 INFO [accwrkr-1-p-12-t-1] SessionTarifficationWorker - Tarifficated 1 sessions for 1 ms.
accounting 03-31/16:05:26 INFO [accwrkr-2-p-11-t-1] SessionFlushingWorker - Flushed 1 sessions for 10(7) ms.
accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] connection - 578:336 Finish stopped call connection by sessionFinishTimeout
accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] connection - 578:336 Finishing call session with lastActive=Fri Mar 31 16:05:28 KGT 2017
accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] Accounting - Finishing session 336
accounting 03-31/16:05:26 INFO [accwrkr-3-p-10-t-1] connection - 578:336 Unregister ip: 192.168.167.10
accounting 03-31/16:05:28 INFO [accwrkr-1-p-12-t-1] InetApplication - inetServ[id=3] deviceState not active (accessCode=0).
accounting 03-31/16:05:28 INFO [accwrkr-1-p-12-t-1] connection - 580:337 Found error 10
accounting 03-31/16:05:28 INFO [accwrkr-1-p-12-t-1] connection - 580:337 Sending event to stop session...
Config:Код:
connection.close.timeout.forceClose=1
connection.start.fromAccept=1
nas.radius.address.fromRequest=1
nas.radius.connection.attributes=Acct-Session-Id,User-Name,Framed-IP-Address
nas.radius.disable.accessCodes=10,12
nas.radius.disable.attributes=Acct-Interim-Interval=60;cisco-avpair=subscriber:accounting-list=TALL-SUB;cisco-ssg-account-info=ASERVICE-TRUSTED;cisco-ssg-account-info=ALOCAL-L4R
nas.radius.disable.mode=1
radius.address.fromRequest=1
radius.disable.accessCodes=10,12
radius.disable.attributes=Acct-Interim-Interval=60;cisco-avpair=subscriber:accounting-list=TALL-SUB;cisco-ssg-account-info=ASERVICE-TRUSTED;cisco-ssg-account-info=ALOCAL-L4R
radius.disable.mode=1
sa.radius.connection.attributes=Acct-Session-Id,User-Name,Framed-IP-Address
sa.radius.connection.close.mode=3
sa.radius.connection.close.removeFromKeyMap=0
sa.radius.connection.coa.mode=2
sa.radius.connection.stateModify=0
sa.radius.connection.withoutBreak=0