BiTel

Добрый день, пытаемся реализовать схему ISG и авторизация по Option82
Все сделали как по статье в вики http://wiki.bitel.ru/index.php/ISG,_%D1 ... 5_option82

Абонент IP адрес получил, сервисы на ISG навесились на абонента, но в мониторе только одна сессия (а по статье должно быть в результате две ) и в логах пишет Nas_port not found

Кусок лога из InetAccounting
Версия 6.1

В последнем билде добавили, чтобы значение пытался брать из Nas-Port-Id, если нет Nas-Port. Попробуйте.

наверное не совсем удачный вариант
теперь аккаутинг дальше пошел, но в мониторинге появилось 4 сессии на клиента, т.е.1 - dhcp, и 3 для ISG с разными session-id но одинаковыми nas-port-id

Вот что на эту тему творится на самом ISG и в мониторе INET

Current Subscriber Information: Total sessions 1
--------------------------------------------------
Unique Session ID: 651
Identifier:
SIP subscriber access type(s): Traffic-Class
Current SIP options: None
Session Up-time: 00:50:36, Last Changed: 00:50:36

Policy information:
Authentication status: unauthen

Session inbound features:
Feature: Service accounting
Service: ISG-LOCAL
Method List: ipoe-isg-aaa
Packets = 0, Bytes = 0

Feature: Policing
Upstream Params:
Average rate = 10240000, Normal burst = 1920000, Excess burst = 3840000
Config level = Service

Session outbound features:
Feature: Service accounting
Service: ISG-LOCAL
Method List: ipoe-isg-aaa
Packets = 69421, Bytes = 74846814

Feature: Policing
Dnstream Params:
Average rate = 10240000, Normal burst = 1920000, Excess burst = 3840000
Config level = Service

Configuration sources associated with this session:
Service: ISG-LOCAL, Active Time = 00:50:38

--------------------------------------------------
Unique Session ID: 652
Identifier:
SIP subscriber access type(s): Traffic-Class
Current SIP options: None
Session Up-time: 00:50:37, Last Changed: 00:50:37

Policy information:
Authentication status: unauthen

Session inbound features:
Feature: Service accounting
Service: ISG-5MBPS
Method List: ipoe-isg-aaa
Packets = 56852, Bytes = 30317011

Feature: Policing
Upstream Params:
Average rate = 5120000, Normal burst = 384000, Excess burst = 768000
Config level = Service

Session outbound features:
Feature: Service accounting
Service: ISG-5MBPS
Method List: ipoe-isg-aaa
Packets = 0, Bytes = 0

Feature: Policing
Dnstream Params:
Average rate = 5120000, Normal burst = 960000, Excess burst = 1920000
Config level = Service

Configuration sources associated with this session:
Service: ISG-5MBPS, Active Time = 00:50:45

--------------------------------------------------
Unique Session ID: 650
Identifier: 10.1.30.6
SIP subscriber access type(s): IP
Current SIP options: Req Fwding/Req Fwded
Session Up-time: 00:50:46, Last Changed: 00:50:45

Policy information:
Authentication status: authen
Active services associated with session:
name "ISG-5MBPS"
name "ISG-LOCAL"
Rules, actions and conditions executed:
subscriber rule-map IPoE-ISG
condition always event session-start
10 authorize aaa list ipoe-isg-aaa identifier source-ip-address

Session inbound features:
Feature: IP Idle Timeout
Timeout value is 1300
Idle time is 00:09:59
Feature: Session accounting
Method List: ipoe-isg-aaa
Packets = 56852, Bytes = 30317011

Traffic classes:
Traffic class session ID: 652
ACL Name: 101, Packets = 56852, Bytes = 30317011
Unmatched Packets (dropped) = 0, Re-classified packets (redirected) = 0

Session outbound features:
Feature: Session accounting
Method List: ipoe-isg-aaa
Packets = 69421, Bytes = 74846814

Traffic classes:
Traffic class session ID: 651
ACL Name: 2110, Packets = 69421, Bytes = 74846814
Traffic class session ID: 652
ACL Name: 102, Packets = 0, Bytes = 0
Unmatched Packets (dropped) = 0, Re-classified packets (redirected) = 0

Configuration sources associated with this session:
Service: ISG-5MBPS, Active Time = 00:50:47
AAA Service ID = 1678258140
Service: ISG-LOCAL, Active Time = 00:50:47
AAA Service ID = 1678247356
Interface: GigabitEthernet0/1.1504, Active Time = 00:50:47


Вот что творится в этот момент в мониторе INET

---------------------------------------------------------------------------
Time: 25.03.2015 04:16:39
Packet type: Accounting-Request
Identifier: 234
Authenticator: {CF 01 63 AE A1 44 5D 3E 5D 80 C8 86 E2 B1 98 D4}
Attributes:
User-Name=10.1.30.6
NAS-Port-Id=0/0/1/1504
Acct-Output-Packets=0
NAS-IP-Address=10.1.12.249
Service-Type=2
Framed-Protocol=1
Framed-IP-Address=10.1.30.6
Acct-Input-Octets=30312299
Acct-Output-Octets=0
Acct-Status-Type=3
Acct-Delay-Time=0
Acct-Session-Time=2166
Acct-Input-Packets=56808
NAS-Port-Type=5
Acct-Session-Id=000004D2


Time: 25.03.2015 04:21:34
Packet type: CoA-Request
Identifier: 7
Authenticator: {BB 80 C4 10 E1 84 3A AC 2B 07 53 7B 9B ED 61 2D}
Attributes:
User-Name=10.1.30.6
Framed-IP-Address=10.1.30.6
Acct-Session-Id=000004D2
cisco-avpair=subscriber:command=account-logoff

Time: 25.03.2015 04:21:34
Packet type: CoA-NAK
Identifier: 7
Authenticator: {91 12 D3 08 74 1E 53 76 64 8D 27 2E B5 E6 5E C0}
Attributes:
Error-Cause=503
Reply-Message=No valid Session
cisco-SSG-Command-Code=\0x102;10.1.30.6

---------------------------------------------------------------------------
Time: 25.03.2015 04:18:01
Packet type: Accounting-Request
Identifier: 237
Authenticator: {37 F8 C7 0C B3 27 16 15 75 42 3F 33 1A 09 10 43}
Attributes:
User-Name=10.1.30.6
NAS-Port-Id=0/0/1/1504
Acct-Output-Packets=69366
NAS-IP-Address=10.1.12.249
Service-Type=2
Framed-Protocol=1
Framed-IP-Address=10.1.30.6
Acct-Input-Octets=0
Acct-Output-Octets=74833028
Acct-Status-Type=3
Acct-Delay-Time=0
Acct-Session-Time=2248
Acct-Input-Packets=0
NAS-Port-Type=5
Acct-Session-Id=000004D1
---------------------------------------------------------------------------
Time: 25.03.2015 04:17:31
Packet type: Accounting-Request
Identifier: 235
Authenticator: {14 58 BA D7 94 8C 61 87 0C 2B A4 AE 01 41 0D 3D}
Attributes:
User-Name=10.1.30.6
NAS-IP-Address=10.1.12.249
Service-Type=2
Framed-Protocol=1
Framed-IP-Address=10.1.30.6
UNKNOWN[-1-197]={60 6C 9A 2C}
Acct-Input-Octets=30313866
UNKNOWN[-1-196]={00 00 00 0A}
Acct-Output-Octets=74832878
Acct-Status-Type=3
Acct-Delay-Time=0
UNKNOWN[-1-198]={00 00 00 00}
UNKNOWN[-1-193]={00 00 00 00}
Acct-Session-Time=2218
UNKNOWN[-1-192]={00 00 00 00}
Acct-Input-Packets=56821
Acct-Session-Id=000004D0
Acct-Authentic=1
UNKNOWN[-1-255]={60 6C A6 F0}
NAS-Port-Id=0/0/1/1504
Acct-Output-Packets=69363
UNKNOWN[-1-190]={00 00 00 00}
UNKNOWN[-1-191]={00 00 00 00}
NAS-Port-Type=5
---------------------------------------------------------------------------

cisco-7206#show subscriber session detailed
Current Subscriber Information: Total sessions 1
--------------------------------------------------
Unique Session ID: 651
Identifier:
SIP subscriber access type(s): Traffic-Class
Current SIP options: None
Session Up-time: 01:01:00, Last Changed: 01:01:00

Policy information:
Context 205FC688: Handle B10004A8
AAA_id 00000129: Flow_handle 1
Authentication status: unauthen
Downloaded User profile, including services:
username "ISG-LOCAL"
clid-mac-addr D4 CA 6D B8 24 54
traffic-class "output access-group 2110 priority 100"
accounting-list "ipoe-isg-aaa"
ssg-service-info "QU;10240000;D;10240000"
Config history for session (recent to oldest):
Access-type: Web-service-logon Client: Service Command-Handler
Policy event: Service-Start (Service)
Profile name: ISG-LOCAL, 4 references
username "ISG-LOCAL"
clid-mac-addr D4 CA 6D B8 24 54
password <hidden>
traffic-class "output access-group 2110 priority 100"
accounting-list "ipoe-isg-aaa"
ssg-service-info "QU;10240000;D;10240000"

Session inbound features:
Feature: Service accounting
Service: ISG-LOCAL
Method List: ipoe-isg-aaa
Packets = 0, Bytes = 0

Feature: Policing
Upstream Params:
Average rate = 10240000, Normal burst = 1920000, Excess burst = 3840000
Config level = Service

Session outbound features:
Feature: Service accounting
Service: ISG-LOCAL
Method List: ipoe-isg-aaa
Packets = 69424, Bytes = 74846943

Feature: Policing
Dnstream Params:
Average rate = 10240000, Normal burst = 1920000, Excess burst = 3840000
Config level = Service

Configuration sources associated with this session:
Service: ISG-LOCAL, Active Time = 01:01:21

--------------------------------------------------
Unique Session ID: 652
Identifier:
SIP subscriber access type(s): Traffic-Class
Current SIP options: None
Session Up-time: 01:01:21, Last Changed: 01:01:21

Policy information:
Context 205FC510: Handle 980004A9
AAA_id 00000129: Flow_handle 2
Authentication status: unauthen
Downloaded User profile, including services:
accounting-list "ipoe-isg-aaa"
traffic-class "in access-group 101 priority 201"
traffic-class "out access-group 102 priority 201"
ssg-service-info "QU;5120000;384000;768000;D;5120000;960000;1920000"
Config history for session (recent to oldest):
Access-type: Web-service-logon Client: Service Command-Handler
Policy event: Service-Start (Service)
Profile name: ISG-5MBPS, 4 references
accounting-list "ipoe-isg-aaa"
traffic-class "in access-group 101 priority 201"
traffic-class "out access-group 102 priority 201"
ssg-service-info "QU;5120000;384000;768000;D;5120000;960000;1920000"

Session inbound features:
Feature: Service accounting
Service: ISG-5MBPS
Method List: ipoe-isg-aaa
Packets = 56852, Bytes = 30317011

Feature: Policing
Upstream Params:
Average rate = 5120000, Normal burst = 384000, Excess burst = 768000
Config level = Service

Session outbound features:
Feature: Service accounting
Service: ISG-5MBPS
Method List: ipoe-isg-aaa
Packets = 0, Bytes = 0

Feature: Policing
Dnstream Params:
Average rate = 5120000, Normal burst = 960000, Excess burst = 1920000
Config level = Service

Configuration sources associated with this session:
Service: ISG-5MBPS, Active Time = 01:01:22

--------------------------------------------------
Unique Session ID: 650
Identifier: 10.1.30.6
SIP subscriber access type(s): IP
Current SIP options: Req Fwding/Req Fwded
Session Up-time: 01:01:23, Last Changed: 01:01:22

Policy information:
Context 205FC800: Handle E90004A7
AAA_id 00000129: Flow_handle 0
Authentication status: authen
Downloaded User profile, excluding services:
idletime 1300 (0x514)
accounting-list "ipoe-isg-aaa"
ssg-account-info "AISG-5MBPS"
ssg-account-info "AISG-LOCAL"
Downloaded User profile, including services:
idletime 1300 (0x514)
accounting-list "ipoe-isg-aaa"
ssg-account-info "AISG-5MBPS"
ssg-account-info "AISG-LOCAL"
username "ISG-LOCAL"
clid-mac-addr D4 CA 6D B8 24 54
traffic-class "in access-group 101 priority 201"
traffic-class "out access-group 102 priority 201"
ssg-service-info "QU;5120000;384000;768000;D;5120000;960000;1920000"
Config history for session (recent to oldest):
Access-type: Web-service-logon Client: SM
Policy event: Apply Config Success (Service)
Profile name: ISG-5MBPS, 4 references
accounting-list "ipoe-isg-aaa"
traffic-class "in access-group 101 priority 201"
traffic-class "out access-group 102 priority 201"
ssg-service-info "QU;5120000;384000;768000;D;5120000;960000;1920000"
Access-type: Web-service-logon Client: SM
Policy event: Apply Config Success (Service)
Profile name: ISG-LOCAL, 4 references
username "ISG-LOCAL"
clid-mac-addr D4 CA 6D B8 24 54
password <hidden>
traffic-class "output access-group 2110 priority 100"
accounting-list "ipoe-isg-aaa"
ssg-service-info "QU;10240000;D;10240000"
Access-type: IP Client: SM
Policy event: Service Selection Request
Profile name: 10.1.30.6, 2 references
idletime 1300 (0x514)
accounting-list "ipoe-isg-aaa"
ssg-account-info "AISG-5MBPS"
ssg-account-info "AISG-LOCAL"
Active services associated with session:
name "ISG-5MBPS"
name "ISG-LOCAL"
Rules, actions and conditions executed:
subscriber rule-map IPoE-ISG
condition always event session-start
10 authorize aaa list ipoe-isg-aaa identifier source-ip-address

Session inbound features:
Feature: IP Idle Timeout
Timeout value is 1300
Idle time is 00:20:37
Feature: Session accounting
Method List: ipoe-isg-aaa
Packets = 56852, Bytes = 30317011

Traffic classes:
Traffic class session ID: 652
ACL Name: 101, Packets = 56852, Bytes = 30317011
Unmatched Packets (dropped) = 0, Re-classified packets (redirected) = 0

Session outbound features:
Feature: Session accounting
Method List: ipoe-isg-aaa
Packets = 69424, Bytes = 74846943

Traffic classes:
Traffic class session ID: 651
ACL Name: 2110, Packets = 69424, Bytes = 74846943
Traffic class session ID: 652
ACL Name: 102, Packets = 0, Bytes = 0
Unmatched Packets (dropped) = 0, Re-classified packets (redirected) = 0

Configuration sources associated with this session:
Service: ISG-5MBPS, Active Time = 01:01:25
AAA Service ID = 1678258140
Service: ISG-LOCAL, Active Time = 01:01:25
AAA Service ID = 1678247356
Interface: GigabitEthernet0/1.1504, Active Time = 01:01:25

Видимо две из них это сервисные. В их RADIUS пакетах должен быть атрибут parent acct session id. По нему биллинг должен понять что они дочерние по отношению к родительской.

Обычно так выглядит: Т.е. присутствует Acct-Session-Id родительской сессии и имя сервиса ISG, по которой этот сервисный RADIUS-аккаунтинг.

Да, спасибо, поправили конфиг циски, и все стало хорошо.