Jump to content
Калькуляторы

Не понятно как, но авторизовывается Lanbilling 2.0 + se + opt82 +vlan + Inventory

Завел абонента в биллинге, привязал его к порту коммутатора доступа и указал мак адрес транспортной сети.

 

И так, втыкаю соску, смотрю:

 

28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [HandleRadius]  >=>=>=>=>=>=>=> Auth Packet received from 192.168.254.2, size: 340 >=>=>=>=>=>=>=>
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Authenticator: a64d65226557a35364592f8e12b5d9c8
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'User-Name', value: "00:26:9e:10:4f:13"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'Password', value: "3df33808193e36fb58d6c9043118e4cd"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseAttr]     User-Password = "Redback"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'Service-Type', value: "5"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'NAS-Identifier', value: "Redback"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'NAS-IP-Address', value: "192.168.254.2"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'NAS-Port', value: "553650130"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'NAS-Real-Port', vendor 2352, value: "553650130"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'NAS-Port-Type', value: "5"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'NAS-Port-Id', value: "2/1 vlan-id 2002 clips 131110"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'Medium-Type', vendor 2352, value: "11"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'Mac-Addr', vendor 2352, value: "00-26-9e-10-4f-13"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'Platform-Type', vendor 2352, value: "4"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'OS-Version', vendor 2352, value: "12.1.1.4p1"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'Redback-Agent-Remote-Id', vendor 2352, value: "000684c9b28a3000"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Unknown VSA 2, vendor 3561, value: "000684c9b28a3000"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'Redback-Agent-Circuit-Id', vendor 2352, value: "000407d20002"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Unknown VSA 1, vendor 3561, value: "000407d20002"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'DHCP-Option', vendor 2352, value: "3d3d070100269e104f13"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'DHCP-Option', vendor 2352, value: "0c0c0841646d696e2d8f8a"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     Attribute 'Acct-Session-Id', value: "0100FFFF78000026-556722F5"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [ParseBody]     VSA 'DHCP-Vendor-Class-ID', vendor 2352, value: "MSFT 5.0"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [TryAuthISG]    Trying to authenticate ISG with method 'opt82'
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [TryAuthISGByOpt82]     Opt82 params: "84c9b28a3000", 2
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [CheckBlackList]        ANI '00269e104f13' (User 'test1') is clean
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [AuthenticateFromDB]    User: 'test1', bill by traffic, unlimited session timeout (180)
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [GetClientIPAddr]       Request for ip, guest = 0, nasidx = 1
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [GetIP] Pool for NAS 1 returned 10.10.0.240, free: 252, used: 1. GetIP Ok!
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [GetClientIPAddr]       Client IP/Netmask: 10.10.0.240/255.255.255.255, ANI: "00269e104f13"
28.05.2015 20:15:22 INFO        0x7fc2c21fc700  [RunAuthRequest]        Access-Accept, <test1> [1], Session-Id 0100FFFF78000026-556722F5
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        =============== Output attributes dump: ===============
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        Attribute 'Session-Timeout', value: "180"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        Attribute 'Service-Type', value: "5"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        Attribute 'Framed-IP-Address', value: "10.10.0.240"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        Attribute 'Framed-IP-Netmask', value: "255.255.255.255"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        Attribute 'Class', value: "00000001"
28.05.2015 20:15:22 VERBOSE     0x7fc2c21fc700  [RunAuthRequest]        Attribute 'Acct-Interim-Interval', value: "600"

 

Т.е. opt82 парсит нормально

28.05.2015 20:15:22 VERBOSE 0x7fc2c21fc700 [TryAuthISGByOpt82] Opt82 params: "84c9b28a3000", 2

, абонента пропустил

Access-Accept, <test1> [1], Session-Id 0100FFFF78000026-556722F5.

 

Но вся не задача в том, что абонент привязан к первому порту коммутатора. Вот как так ?

 

Смотрим Inventory, убираю привязку vlan к порту коммутатора.

Опа:

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [HandleRadius] >=>=>=>=>=>=>=> Auth Packet received from 192.168.254.2, size: 340 >=>=>=>=>=>=>=>

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Authenticator: 3583b6437e7178f34339ca67b5dcbfb4

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'User-Name', value: "00:26:9e:10:4f:13"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'Password', value: "fdc4ae6ee0bac94f4f6b61f06d76af91"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseAttr] User-Password = "Redback"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'Service-Type', value: "5"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'NAS-Identifier', value: "Redback"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'NAS-IP-Address', value: "192.168.254.2"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'NAS-Port', value: "553650130"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'NAS-Real-Port', vendor 2352, value: "553650130"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'NAS-Port-Type', value: "5"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'NAS-Port-Id', value: "2/1 vlan-id 2002 clips 131112"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'Medium-Type', vendor 2352, value: "11"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'Mac-Addr', vendor 2352, value: "00-26-9e-10-4f-13"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'Platform-Type', vendor 2352, value: "4"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'OS-Version', vendor 2352, value: "12.1.1.4p1"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'Redback-Agent-Remote-Id', vendor 2352, value: "000684c9b28a3000"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Unknown VSA 2, vendor 3561, value: "000684c9b28a3000"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'Redback-Agent-Circuit-Id', vendor 2352, value: "000407d20002"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Unknown VSA 1, vendor 3561, value: "000407d20002"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'DHCP-Option', vendor 2352, value: "3d3d070100269e104f13"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'DHCP-Option', vendor 2352, value: "0c0c0841646d696e2d8f8a"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] Attribute 'Acct-Session-Id', value: "0100FFFF78000028-55672533"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [ParseBody] VSA 'DHCP-Vendor-Class-ID', vendor 2352, value: "MSFT 5.0"

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [TryAuthISG] Trying to authenticate ISG with method 'opt82'

28.05.2015 20:24:56 VERBOSE 0x7f0b1d7fb700 [TryAuthISGByOpt82] Opt82 params: "84c9b28a3000", 2

28.05.2015 20:24:56 INFO 0x7f0b1d7fb700 [RunAuthRequest] Access-Reject, <00:26:9e:10:4f:13>, Session-Id 0100FFFF78000028-55672533, {user <00:26:9e:10:4f:13> not found}

 

Опять же отпарсил правильно.

 

Opt82 params: "84c9b28a3000", 2

 

 

 

Может кто смог понять смысл привязки vlan к порту ?

Почему сия конструкция себя так ведет ?

 

Изначально, я думал, что указав влан, я привяжу абонента не только opt82+ мак но и vlan...

Share this post


Link to post
Share on other sites

Не.. тут все складывается по ИЛИ, а не И

Share this post


Link to post
Share on other sites

Тогда кто может пояснить, когда в инвентори добавляю влан на порт где сидит абонент, тогда авторизация идет как бы по только по мак (хотя все атрибуты и знчения есть).

Когда влан убераю, в инвентори, тогда идет авторизация по опт82.... вот как так то ?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this