Avanta-telecom Posted October 28, 2017 Posted October 28, 2017 Всем здравствуйте. Задача PPPoe сервер с авторизацией на radius. все вроде по мануалу, но ничего не пашет. Tcpdump на радиусе даже пакетов на принимает от cisco. Если делать test aaa group.... то радиус получает и отвечает на запросы. Висит микротик и постоянно пытается авторизоваться, но так как нет данных от радиуса, то ничего не выходит. Interface/ID OPEN+ Nego* Fail- Stage Peer Address Peer Name ------------ --------------------- -------- --------------- -------------------- 0x23000004 LCP+ PAP* UnauthNa 0.0.0.0 BILL0001542 Все силы покинули меня уже. Может кто подскажет, что не так я делаю? version 15.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec ! hostname PE-Pharaon ! boot-start-marker boot system flash disk:c7200p-spservicesk9-mz.152-4.S5.bin boot bootldr bootflash:c7200p-boot-mz.152-4.S3.bin warm-reboot boot-end-marker ! ! aaa new-model ! ! aaa group server radius avantabill server-private 10.11.13.249 auth-port 1812 acct-port 1813 timeout 3 retransmit 2 key servicemode server 10.11.13.249 auth-port 1812 acct-port 1813 ip radius source-interface GigabitEthernet0/1 deadtime 1 ! aaa authentication login default local aaa authentication login AAA_LIST_PPPOE group avantabill aaa authentication login AAA_LIST_IPOE group avantabill aaa authentication ppp AAA_LIST_PPPOE group avantabill aaa authorization network AAA_LIST_PPPOE group avantabill aaa authorization network AAA_LIST_IPOE group avantabill aaa authorization subscriber-service default local aaa authorization subscriber-service AAA_LIST_PPPOE local group avantabill aaa authorization subscriber-service AAA_LIST_IPOE local group avantabill aaa accounting delay-start all aaa accounting redundancy suppress system-records aaa accounting redundancy best-effort-reuse send-interim aaa accounting jitter maximum 10 aaa accounting update periodic 20 aaa accounting network AAA_LIST_PPPOE action-type start-stop group avantabill ! aaa accounting network avantabill action-type start-stop group avantabill ! !! ! aaa server radius dynamic-author client 10.11.13.249 server-key servicemode port 3799 ! aaa session-id common aaa policy interface-config allow-subinterface clock timezone MSK 3 0 ip cef ! !! archive log config hidekeys ! ! bba-group pppoe avantaPPP virtual-template 128 sessions per-mac limit 2 sessions auto cleanup ! ! interface Loopback0 no ip address no ip route-cache ! interface Loopback128 ip address 10.128.0.5 255.255.255.255 no ip route-cache ! interface GigabitEthernet0/1 description Uplink-226 mtu 2000 ip address x.x.x.x 255.255.255.240 no ip route-cache media-type rj45 speed auto duplex auto negotiation auto ! interface GigabitEthernet0/1.900 encapsulation dot1Q 900 no ip redirects no ip proxy-arp no ip route-cache pppoe enable group avantaPPP pppoe max-sessions 1 ! interface GigabitEthernet0/2 no ip address no ip route-cache shutdown media-type rj45 speed auto duplex auto negotiation auto ! interface GigabitEthernet0/3 no ip address no ip route-cache shutdown media-type rj45 speed auto duplex auto negotiation auto ! interface Virtual-Template128 mtu 1492 ip unnumbered Loopback128 ip flow ingress ip flow egress ip tcp adjust-mss 1300 no peer default ip address keepalive 60 ppp authentication pap chap avantabill ppp authorization avantabill ppp accounting avantabill ppp ipcp dns 8.8.8.8 ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ! ! radius-server attribute 44 include-in-access-req default-vrf radius-server attribute nas-port format c radius-server host 10.11.13.249 auth-port 1812 acct-port 1813 key servicemode Если убрать данную строчку, то командой test aaa group radius..... ничего не получается получить radius-server vsa send accounting radius-server vsa send authentication ! end Вставить ник Quote
Avanta-telecom Posted October 29, 2017 Author Posted October 29, 2017 что б их этих цискарей.... после 4-й смены иос начало работать. Вставить ник Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.