Народ, помогите!
Не появляется сессия!
Может быть кто знает, что означает ошибка:
debug(был получен раньше, чем логи access и accounting - тоже самое) redback:
Код:
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: check_for_hotlining=FALSE
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_proc_param: svc_buf offset = 34, svc_buf = RSE-SVC-EXT Rate=1000 Burst=125000
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_proc_set_class_attr: Assigned class names to attributes in the request (11)
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_proc_param: subscriber = 11, status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_alloc_res: sib_wrap=0x4217e92c, sib_wrap->sw_flags=0x0000 svc_id=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: propagate_hotlining_svc_mask:4140: svc_id=0 No Hotline Indicator found
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_validate: subscriber=11 status=success (0) cfg= svc_id=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (dynamic policy acl) = ip in forward class EXTERNAL qos, len = 32
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 18(dynamic policy acl) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (dynamic policy acl) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_add_attr: Created TLV attr = Type: dynamic policy acl Len: 0 Flag: 0000 Svc Mask: 0000 is_tlv=1 Sess attr: No Value:
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (dynamic policy acl) = ip out forward class EXTERNAL qos, len = 33
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 18(dynamic policy acl) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (dynamic policy acl) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: param = $Rate
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_param_subst: service param name = $Rate, value = 1000, val_len = 4, status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: built_attr_str = meter-class-rate EXTERNAL rate-absolute 1000, len = 44
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (qos-dynamic-param) = meter-class-rate EXTERNAL rate-absolute 1000, len = 44
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 231(qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_add_attr: Created TLV attr = Type: qos-dynamic-param Len: 0 Flag: 0000 Svc Mask: 0000 is_tlv=1 Sess attr: No Value:
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: param = $Burst
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_param_subst: service param name = $Burst, value = 125000, val_len = 6, status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: built_attr_str = meter-class-burst EXTERNAL 125000, len = 33
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (qos-dynamic-param) = meter-class-burst EXTERNAL 125000, len = 33
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 231(qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: param = $Rate
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_param_subst: service param name = $Rate, value = 1000, val_len = 4, status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: built_attr_str = police-class-rate EXTERNAL rate-absolute 1000, len = 45
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (qos-dynamic-param) = police-class-rate EXTERNAL rate-absolute 1000, len = 45
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 231(qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: param = $Burst
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_param_subst: service param name = $Burst, value = 125000, val_len = 6, status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_build_attr_str: built_attr_str = police-class-burst EXTERNAL 125000, len = 34
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (qos-dynamic-param) = police-class-burst EXTERNAL 125000, len = 34
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 231(qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (qos-dynamic-param) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: service attribute (service-interim-acct-interval) = 900, len = 3
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_vector_attr: Set svc-interim-acct-interval value to 900 secs
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_is_dup_vector_param: checking svc id 0 attr type 236 value 900
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_is_dup_vector_param: cannot find attr in vector attr list
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_vector_attr: Vector attribute issu_id = 236 (service-interim-acct-interval)create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_attr: svc attribute (service-interim-acct-interval) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_add_attr: Created Vector attr issu_id = 236 (service-interim-acct-interval)
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: attr=service-acct (in) (227) sa_flags=0x84 Tell PPA notto hotline
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_get_class_mask: Class name converted to class id for policy DEF-L2TP-IN, class EXTERNAL, id 0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_get_class_mask:, Reset session used class mask upon active service with static class 0x1 0x0 0x0 0x0 0x0 0x0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 227(service-acct (in)) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_add_attr: Created TLV attr = Type: service-acct (in) Len: 0 Flag: 0000 Svc Mask: 0000 is_tlv=1 Sess attr: No Value:
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: attr=service-acct (out) (228) sa_flags=0x84 Tell PPA notto hotline
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_get_class_mask: Class name converted to class id for policy DEF-L2TP-OUT, class EXTERNAL, id 0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_get_class_mask:, Reset session used class mask upon active service with static class 0x1 0x0 0x0 0x1 0x0 0x0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_cre_tlv_attr: TLV attribute issu_id 228(service-acct (out)) create status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_add_attr: Created TLV attr = Type: service-acct (out) Len: 0 Flag: 0000 Svc Mask: 0000 is_tlv=1 Sess attr: No Value:
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_gen_attrs: svc attr generation for subscriber = 11,status = success
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_set_state: Service id = 0, Curr state = IDLE Event = 0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_set_state: Service id = 0, New state = AWAIT_ACTIVE
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_proc_reauth: service-reauth attr not found
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_proc: Rebuild new mask 0001 prev mask 0000 deact mask 0000 reauth mask 0000 rebuild = 1
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list: is_shm=1, rebuild_mask=1
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4800 attr_type=232 len=76 g_attr_list_len=132, g_attr_v4_list_len=132, g_attr_v6_list_len=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4800 attr_type=239 len=64 g_attr_list_len=196, g_attr_v4_list_len=196, g_attr_v6_list_len=0
Oct 1 09:55:57: %AAA-7-SVC: sort_filter_attr: sort filter attr status (success)
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4800 attr_type=18 len=136 g_attr_list_len=332, g_attr_v4_list_len=332, g_attr_v6_list_len=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4800 attr_type=231 len=176 g_attr_list_len=508, g_attr_v4_list_len=508, g_attr_v6_list_len=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4800 attr_type=227 len=44 g_attr_list_len=552, g_attr_v4_list_len=552, g_attr_v6_list_len=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4800 attr_type=228 len=44 g_attr_list_len=596, g_attr_v4_list_len=596, g_attr_v6_list_len=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4841 g_attr_list_len=616 g_attr_v4_list_len=616, g_attr_v6_list_len=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4853 g_attr_list_len=624 g_attr_v4_list_len=624, g_attr_v6_list_len=8
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4962 Add attr issu_id = 29 (qos-policing-policy) len=28
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:4962 Add attr issu_id = 30 (qos-metering-policy) len=28
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5029 Add attr issu_id 232(service) len=76
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5029 Add attr issu_id 239(service-parameter) len=64
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5029 Add attr issu_id 18(dynamic policy acl) len=136
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5029 Add attr issu_id 231(qos-dynamic-param) len=176
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5029 Add attr issu_id 227(service-acct (in)) len=44
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5029 Add attr issu_id 228(service-acct (out)) len=44
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_svc_rebuild_attr_list:5106 Add attr issu_id 236(service-interim-acct-interval) len=20 list_len=616
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: g_attr_list_len=624, reauth_attr_list=0, g_attr_list_v4_len=624, dynamic_author=616, g_attr_list_v6_len=8, v6_dynamic_author=0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_ppa_apply_attr: State: 1, Event: 1, Val Idx: 0
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-SVC: aaa_idx 1089c44d: aaa_ppa_apply_attr: Svc id: 0, Attr value: 900, Val Idx: 0, SIB flags: 0x0007
[b]Oct 1 09:55:57: %AAA-7-EXCEPT: aaa_ppa_send_msg: PPA IPC pack is not set(iPPA slot: 1)
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-EXCEPT: aaa_idx 1089c44d: aaa_do_attr_provisioning_post_proc: unable to send message to PPA return error 20
Oct 1 09:55:57: [0130]: [255/16:511:63:31/5/2/9317]: %AAA-7-EXCEPT: aaa_idx 1089c44d: aaa_process_session_up: session attribute provisioning failed for subscriber 11
Код:
[L2TP]RedBack#sh subscribers active
11[/b]
Session state Authenticated
Circuit L2TP LNS 63427
Internal Circuit 255/16:511:63:31/5/2/63427
Interface bound ppp
Current port-limit unlimited
Protocol Stack not set
ip address 172.29.1.82 (applied)
ip source-validation 1 (applied from sub_default)
dns primary xx.xx.xx.x8 (applied from sub_default)
dns secondary xx.xx.xx.x9 (applied from sub_default)
qos-policing-policy DEF-L2TP-IN (applied from sub_default)
qos-metering-policy DEF-L2TP-OUT (applied from sub_default)
service (applied)
[svc id: 0] RSE-SVC-EXT (acct enabled)
service-parameter (applied)
[svc id: 0] Rate=1000 Burst=125000
dynamic policy acl [svc mask: 0x0001] (applied in: qos out: qos)
[svc id: 0] ip out forward class EXTERNAL qos
[svc id: 0] ip in forward class EXTERNAL qos
qos-dynamic-param [svc mask: 0x0001] (applied)
[svc id: 0] meter-class-rate EXTERNAL rate-absolute 1000 (applied) in-progress
[svc id: 0] meter-class-burst EXTERNAL 125000 (applied) in-progress
[svc id: 0] police-class-rate EXTERNAL rate-absolute 1000 (applied) in-progress
[svc id: 0] police-class-burst EXTERNAL 125000 (applied) in-progress
service-acct (in) [svc mask: 0x0001] (applied)
[svc id: 0] qos class-mask 0x01
service-acct (out) [svc mask: 0x0001] (applied)
[svc id: 0] qos class-mask 0x01
service-interim-acct-interval [svc mask: 0x0001] (applied)
[svc id: 0] 900
tunnel type 3 (applied)
tunnel medium type 1 (applied)
tunnel server endpoint 10.50.0.10 (applied)
tunnel client endpoint 10.0.187.15 (applied)
tunnel server auth ID RedBack (applied)
tunnel client auth ID 6343c8d9ac22409 (applied)
tunnel max sessions 65535 (applied)
tunnel max tunnels 32767 (applied)
tunnel function 2 (applied)
tunnel connection 6343c8d9ac22409:19558:62563 (applied)
tunnel vendor avp 0x0000001805f5e100 (applied)
tunnel vendor avp 0x0000002605f5e100 (applied)
nas-port-type-from-enc 2 (applied)
Такое происходит только при активации сервиса!
Если убрать из тарифного дерева опцию, то сессия появляется!
Вложение:
s1.png [ 8.86 КБ | Просмотров: 27116 ]
log access:
Код:
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 87
Authenticator: {21 B1 3A 60 54 76 F5 E1 AD FC F5 18 06 4D 02 5B}
Attributes:
NAS-Identifier=RedBack
Tunnel-Type:0=3
User-Name=11
Tunnel-Medium-Type:0=1
Tunnel-Client-Endpoint=10.0.187.15
CHAP-Password={01 CA 0B 0A 9A 9C 6D 5D 60 73 25 8A 43 EB 97 7D FE}
Tunnel-Server-Endpoint=10.50.0.10
NAS-IP-Address=10.50.0.10
Acct-Tunnel-Connection=6343c8d9ac22409:19558:62563
NAS-Port=-1862207549
Service-Type=2
Framed-Protocol=1
Connect-Info=100000000/100000000
NAS-Port-Id=L2TP LNS 63427
Tunnel-Client-Auth-ID=6343c8d9ac22409
Tunnel-Server-Auth-ID=RedBack
CHAP-Challenge=!�:`Tv����..M.[
NAS-Port-Type=5
OS-Version=11.1.2.9
Platform-Type=4
Tunnel-Function=2
Tunnel-Max-Sessions=65535
Medium-Type=11
Tunnel-Max-Tunnels=32767
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Access-Request
Identifier: 87
Authenticator: {21 B1 3A 60 54 76 F5 E1 AD FC F5 18 06 4D 02 5B}
Attributes:
NAS-Identifier=RedBack
Tunnel-Type:0=3
User-Name=11
Tunnel-Medium-Type:0=1
Tunnel-Client-Endpoint=10.0.187.15
CHAP-Password={01 CA 0B 0A 9A 9C 6D 5D 60 73 25 8A 43 EB 97 7D FE}
Tunnel-Server-Endpoint=10.50.0.10
NAS-IP-Address=10.50.0.10
Acct-Tunnel-Connection=6343c8d9ac22409:19558:62563
NAS-Port=-1862207549
Service-Type=2
Framed-Protocol=1
Connect-Info=100000000/100000000
NAS-Port-Id=L2TP LNS 63427
Tunnel-Client-Auth-ID=6343c8d9ac22409
Tunnel-Server-Auth-ID=RedBack
CHAP-Challenge=!�:`Tv����..M.[
NAS-Port-Type=5
OS-Version=11.1.2.9
Platform-Type=4
Tunnel-Function=2
Tunnel-Max-Sessions=65535
Medium-Type=11
Tunnel-Max-Tunnels=32767
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetNas - Search by username=11
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetRadiusProcessor - [username=11] Authenticated as inetServId:3
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetApplication - TariffOptionMap: {}
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetApplication - inetServ[id=3] balance ok: 943.84 [-218.50]
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetApplication - OptionSet: [1]
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetRadiusProcessor - Set ip from pool
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetRadiusProcessor - Return code=0
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Accept
Identifier: 87
Authenticator: {}
Attributes:
Framed-IP-Address=172.29.1.82
Service-Parameter:1=Rate=1000 Burst=125000
Service-Name:1=RSE-SVC-EXT
Service-Options:1=1
Process time auth: 3
10-01/14:54:00 INFO [rdsLstnr-p-9-t-36] InetRadiusListenerWorker - RESPONSE:
Packet type: Access-Accept
Identifier: 87
Authenticator: {BF BD DE B3 03 01 AF 15 6C 4D 41 DA 67 D3 73 7D}
Attributes:
Framed-IP-Address=172.29.1.82
Service-Parameter:1=Rate=1000 Burst=125000
Service-Name:1=RSE-SVC-EXT
Service-Options:1=1
Process time auth: 4
log accounting:
Код:
10-01/14:53:50 INFO [rdsLstnr-p-8-t-104] RadiusListenerWorker - REQUEST:
Packet type: Accounting-Request
Identifier: 117
Authenticator: {56 11 EF F3 FB EE 9C A5 00 04 96 F1 82 F5 D5 B9}
Attributes:
NAS-Identifier=RedBack
Tunnel-Type:0=3
User-Name=6343c8d9ac22409:8185
Tunnel-Medium-Type:0=1
Tunnel-Client-Endpoint=10.0.187.15
Tunnel-Server-Endpoint=10.50.0.10
NAS-IP-Address=10.50.0.10
Acct-Tunnel-Connection=L8185/R34
Service-Type=5
Acct-Status-Type=10
Acct-Session-Id=L2TPd-00001FF9
Acct-Session-Time=361000000
Acct-Terminate-Cause=3
Event-Timestamp=1443696491
Tunnel-Client-Auth-ID=6343c8d9ac22409
Tunnel-Server-Auth-ID=RedBack
NAS-Port-Type=0
OS-Version=11.1.2.9
Platform-Type=4
Tunnel-Function=2
Tunnel-Max-Sessions=65535
Tunnel-Max-Tunnels=32767
Session-Error-Code=161
Session-Error-Msg=Received a StopCCN from peer
10-01/14:53:50 INFO [rdsLstnr-p-8-t-104] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Accounting-Request
Identifier: 117
Authenticator: {56 11 EF F3 FB EE 9C A5 00 04 96 F1 82 F5 D5 B9}
Attributes:
NAS-Identifier=RedBack
Tunnel-Type:0=3
User-Name=6343c8d9ac22409:8185
Tunnel-Medium-Type:0=1
Tunnel-Client-Endpoint=10.0.187.15
Tunnel-Server-Endpoint=10.50.0.10
NAS-IP-Address=10.50.0.10
Acct-Tunnel-Connection=L8185/R34
Service-Type=5
Acct-Status-Type=10
Acct-Session-Id=L2TPd-00001FF9
Acct-Session-Time=361000000
Acct-Terminate-Cause=3
Event-Timestamp=1443696491
Tunnel-Client-Auth-ID=6343c8d9ac22409
Tunnel-Server-Auth-ID=RedBack
NAS-Port-Type=0
OS-Version=11.1.2.9
Platform-Type=4
Tunnel-Function=2
Tunnel-Max-Sessions=65535
Tunnel-Max-Tunnels=32767
Session-Error-Code=161
Session-Error-Msg=Received a StopCCN from peer
10-01/14:53:50 INFO [rdsLstnr-p-8-t-104] RadiusListenerWorker - RESPONSE:
Packet type: Accounting-Response
Identifier: 117
Authenticator: {FB C1 9B 97 6F C3 B9 93 4F 18 41 41 3B E6 BB 85}
Attributes:
0
10-01/14:53:56 INFO [rdsLstnr-p-8-t-105] RadiusListenerWorker - REQUEST:
Packet type: Accounting-Request
Identifier: 118
Authenticator: {C2 2B 55 BC F4 C7 E2 18 93 EC 04 CF 36 3B 7F D6}
Attributes:
NAS-Identifier=RedBack
Tunnel-Type:0=3
User-Name=6343c8d9ac22409:19558
Tunnel-Medium-Type:0=1
Tunnel-Client-Endpoint=10.0.187.15
Tunnel-Server-Endpoint=10.50.0.10
NAS-IP-Address=10.50.0.10
Acct-Tunnel-Connection=L19558/R35
Service-Type=5
Acct-Status-Type=9
Acct-Session-Id=L2TPd-00004C66
Event-Timestamp=1443696497
Tunnel-Client-Auth-ID=6343c8d9ac22409
Tunnel-Server-Auth-ID=RedBack
NAS-Port-Type=0
OS-Version=11.1.2.9
Platform-Type=4
Tunnel-Function=2
Tunnel-Max-Sessions=65535
Tunnel-Max-Tunnels=32767
10-01/14:53:56 INFO [rdsLstnr-p-8-t-105] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Accounting-Request
Identifier: 118
Authenticator: {C2 2B 55 BC F4 C7 E2 18 93 EC 04 CF 36 3B 7F D6}
Attributes:
NAS-Identifier=RedBack
Tunnel-Type:0=3
User-Name=6343c8d9ac22409:19558
Tunnel-Medium-Type:0=1
Tunnel-Client-Endpoint=10.0.187.15
Tunnel-Server-Endpoint=10.50.0.10
NAS-IP-Address=10.50.0.10
Acct-Tunnel-Connection=L19558/R35
Service-Type=5
Acct-Status-Type=9
Acct-Session-Id=L2TPd-00004C66
Event-Timestamp=1443696497
Tunnel-Client-Auth-ID=6343c8d9ac22409
Tunnel-Server-Auth-ID=RedBack
NAS-Port-Type=0
OS-Version=11.1.2.9
Platform-Type=4
Tunnel-Function=2
Tunnel-Max-Sessions=65535
Tunnel-Max-Tunnels=32767
10-01/14:53:56 INFO [rdsLstnr-p-8-t-105] RadiusListenerWorker - RESPONSE:
Packet type: Accounting-Response
Identifier: 118
Authenticator: {3E BE 12 F1 FC C4 92 47 4D 7D 98 B2 45 C2 E6 7D}
Attributes:
1
настройки redback:
Код:
context L2TP
!
no ip domain-lookup
!
interface L2TP_local intercontext p2p 5
ip address 1x.2xx.1.1x/30
!
interface loop loopback
ip address 10.50.0.10/32
ip source-address telnet snmp ssh radius tacacs+ syslog dhcp-server tftp ftp icmp-dest-unreachable icmp-time-exceed netop flow-ip
!
interface ppp multibind lastresort
ip unnumbered loop
no logging console
!
router isis 3
net 49.2222.3333.1222.3333.00
address-family ipv4 unicast
redistribute subscriber
!
interface L2TP_local
address-family ipv4 unicast
!
interface loop
address-family ipv4 unicast
!
policy access-list SUB-IN
seq 100 permit ip any any class EXTERNAL
!
policy access-list SUB-OUT
seq 100 permit ip any any class EXTERNAL
!
aaa authentication administrator local
aaa authentication administrator maximum sessions 1
aaa authentication subscriber radius
aaa accounting subscriber radius
aaa accounting l2tp tunnel radius
aaa accounting l2tp session radius
aaa update subscriber 10
aaa accounting event reauthorization
aaa accounting suppress-acct-on-fail
radius accounting server xx.xx.xx.x1 encrypted-key xxxxxxxxxxxxxxxxxxxxxxxxxxxx port 11813
radius coa server xx.xx.xx.x1 encrypted-key xxxxxxxxxxxxxxxxxxxxxxxxxxxx port 11799
!
radius server xx.xx.xx.x1 encrypted-key xxxxxxxxxxxxxxxxxxxxxxxxxxxx port 11812
radius attribute nas-ip-address interface loop
radius attribute nas-port format session-info
radius attribute nas-identifier RedBack
!
subscriber default
ip source-validation
qos policy policing DEF-L2TP-IN
qos policy metering DEF-L2TP-OUT
dns primary xx.xx.xx.x8
dns secondary xx.xx.xx.x9
!
radius service profile RSE-SVC-EXT
parameter value in-Rate 10000
parameter value out-Rate 10000
parameter value in-Burst 1250000
parameter value out-Burst 1250000
parameter value Rate 1000
parameter value Burst 125000
accounting in qos EXTERNAL
accounting out qos EXTERNAL
seq 10 attribute Dynamic-Policy-Filter "ip in forward class EXTERNAL qos"
seq 20 attribute Dynamic-Policy-Filter "ip out forward class EXTERNAL qos"
seq 30 attribute Dynamic-Qos-Parameter "meter-class-rate EXTERNAL rate-absolute $Rate"
seq 40 attribute Dynamic-Qos-Parameter "meter-class-burst EXTERNAL $Burst"
seq 50 attribute Dynamic-Qos-Parameter "police-class-rate EXTERNAL rate-absolute $Rate"
seq 60 attribute Dynamic-Qos-Parameter "police-class-burst EXTERNAL $Burst"
seq 70 attribute Service-Interim-Accounting 900
!
ip route 0.0.0.0/0 context local
!
l2tp-peer unnamed local 10.50.0.10
session-auth chap context L2TP
function lns-only
!
!
!
!
! ** End Context **
qos policy DEF-L2TP-IN policing radius-guided
ip access-group SUB-IN L2TP
class EXTERNAL
rate 2000 burst 250000
rate-calculation exclude layer-2-overhead
!
qos policy DEF-L2TP-OUT metering radius-guided
ip access-group SUB-OUT L2TP
class EXTERNAL
rate 2000 burst 250000
rate-calculation exclude layer-2-overhead
!