terrible Posted June 11, 2010 · Report post Настраиваю новый mpd5 сервер: FreeBSD 7.3-RELEASE-p1 FreeBSD 7.3-RELEASE-p1 #5: Fri Jun 11 17:28:57 MSD 2010 root@:/usr/obj/usr/src/sys/MYCONF amd64 на нём пока никого нет, mpd5 является radius клиентом. Конфиг mpd: startup: set user login parol admin set console self 127.0.0.1 5005 set console open radius: set auth max-logins 2 CI set auth disable internal set auth enable radius-auth set auth enable radius-acct set auth timeout 60 set radius identifier mpd set radius retries 3 set radius timeout 5 set radius server 192.168.3.122 123456789qwerty 1812 1813 set radius me 192.168.3.220 set radius enable message-authentic default: set ippool add natpool 172.16.153.1 172.16.154.254 set ippool add defpool 81.91.189.129 81.91.189.191 create bundle template B set ipcp no vjcomp set ipcp no req-pri-dns set ipcp no req-sec-dns set ipcp no req-pri-nbns set ipcp no req-sec-nbns load pptp pptp: create bundle template P set ipcp ranges 81.91.189.3/32 ippool defpool set ipcp dns 81.91.189.7 81.91.189.14 set ipcp no vjcomp set ipcp no req-pri-dns set ipcp no req-sec-dns set ipcp no req-pri-nbns set ipcp no req-sec-nbns create link template P pptp set link action bundle P set link enable multilink set link no pap eap set link enable chap set link enable chap-msv1 set link enable chap-msv2 set link keep-alive 10 60 set link mtu 1492 set link enable peer-as-calling set pptp self 10.10.10.235 1723 set link enable incoming load radius опции ядра: options NETGRAPH options NETGRAPH_PPPOE #options NETGRAPH_IPFW options LIBALIAS options NETGRAPH_NAT options NETGRAPH_NETFLOW options NETGRAPH_SPLIT options NETGRAPH_ECHO options NETGRAPH_ETHER options NETGRAPH_TEE options NETGRAPH_BPF options NETGRAPH_IFACE options NETGRAPH_KSOCKET options NETGRAPH_MPPC_ENCRYPTION options NETGRAPH_PPP options NETGRAPH_PPTPGRE options NETGRAPH_SOCKET options NETGRAPH_TCPMSS options NETGRAPH_VJC Подключаюсь к серверу: # mpd5 Multi-link PPP daemon for FreeBSD process 25125 started, version 5.5 (root@ 14:06 10-Jun-2010) CONSOLE: listening on 127.0.0.1 5005 PPTP: waiting for connection on 10.10.10.235 1723 [P] [P-1] Accepting PPTP connection [P-1] Link: OPEN event [P-1] LCP: Open event [P-1] LCP: state change Initial --> Starting [P-1] LCP: LayerStart [P-1] PPTP: attaching to peer's outgoing call [P-1] Link: UP event [P-1] LCP: Up event [P-1] LCP: state change Starting --> Req-Sent [P-1] LCP: SendConfigReq #1 [P-1] ACFCOMP [P-1] PROTOCOMP [P-1] MRU 1500 [P-1] MAGICNUM feaeca26 [P-1] AUTHPROTO CHAP MSOFTv2 [P-1] MP MRRU 2048 [P-1] MP SHORTSEQ [P-1] ENDPOINTDISC [802.1] 00 15 17 da f8 05 [P-1] LCP: rec'd Configure Request #0 (Req-Sent) [P-1] MRU 1400 [P-1] MAGICNUM 3f617153 [P-1] PROTOCOMP [P-1] ACFCOMP [P-1] CALLBACK 6 [P-1] LCP: SendConfigRej #0 [P-1] CALLBACK 6 [P-1] LCP: rec'd Configure Request #1 (Req-Sent) [P-1] MRU 1400 [P-1] MAGICNUM 3f617153 [P-1] PROTOCOMP [P-1] ACFCOMP [P-1] LCP: SendConfigAck #1 [P-1] MRU 1400 [P-1] MAGICNUM 3f617153 [P-1] PROTOCOMP [P-1] ACFCOMP [P-1] LCP: state change Req-Sent --> Ack-Sent [P-1] LCP: SendConfigReq #2 [P-1] ACFCOMP [P-1] PROTOCOMP [P-1] MRU 1500 [P-1] MAGICNUM feaeca26 [P-1] AUTHPROTO CHAP MSOFTv2 [P-1] MP MRRU 2048 [P-1] MP SHORTSEQ [P-1] ENDPOINTDISC [802.1] 00 15 17 da f8 05 [P-1] LCP: rec'd Configure Reject #2 (Ack-Sent) [P-1] MP MRRU 2048 [P-1] MP SHORTSEQ [P-1] ENDPOINTDISC [802.1] 00 15 17 da f8 05 [P-1] LCP: SendConfigReq #3 [P-1] ACFCOMP [P-1] PROTOCOMP [P-1] MRU 1500 [P-1] MAGICNUM feaeca26 [P-1] AUTHPROTO CHAP MSOFTv2 [P-1] LCP: rec'd Configure Ack #3 (Ack-Sent) [P-1] ACFCOMP [P-1] PROTOCOMP [P-1] MRU 1500 [P-1] MAGICNUM feaeca26 [P-1] AUTHPROTO CHAP MSOFTv2 [P-1] LCP: state change Ack-Sent --> Opened [P-1] LCP: auth: peer wants nothing, I want CHAP [P-1] CHAP: sending CHALLENGE #1 len: 21 [P-1] LCP: LayerUp [P-1] LCP: rec'd Ident #2 (Opened) [P-1] MESG: MSRASV5.10 [P-1] LCP: rec'd Ident #3 (Opened) [P-1] MESG: MSRAS-0-BROOD [P-1] CHAP: rec'd RESPONSE #1 len: 59 [P-1] Name: "brood" [P-1] AUTH: Trying RADIUS [P-1] RADIUS: Authenticating user 'brood' [P-1] RADIUS: Rec'd RAD_ACCESS_ACCEPT for user 'brood' [P-1] AUTH: RADIUS returned: authenticated [P-1] CHAP: Auth return status: authenticated [P-1] CHAP: Reply message: S=6445E4BA4D46000761081AF785ADB5F289379578 [P-1] CHAP: sending SUCCESS #1 len: 46 [P-1] LCP: authorization successful [P-1] Link: Matched action 'bundle "P" ""' [P-1] Creating new bundle using template "P". [P-2] Bundle: Interface ng0 created [P-1] Link: Join bundle "P-2" [P-2] Bundle: Status update: up 1 link, total bandwidth 64000 bps [P-2] IPCP: Open event [P-2] IPCP: state change Initial --> Starting [P-2] IPCP: LayerStart [P-2] IPCP: Up event [P-2] IPCP: Got IP 81.91.189.129 from pool "defpool" for peer [P-2] IPCP: state change Starting --> Req-Sent [P-2] IPCP: SendConfigReq #1 [P-2] IPADDR 81.91.189.3 [P-1] RADIUS: Accounting user 'brood' (Type: 1) [P-1] RADIUS: Rec'd RAD_ACCOUNTING_RESPONSE for user 'brood' [P-1] rec'd unexpected protocol CCP, rejecting [P-2] IPCP: rec'd Configure Request #5 (Req-Sent) [P-2] IPADDR 0.0.0.0 [P-2] NAKing with 81.91.189.129 [P-2] PRIDNS 0.0.0.0 [P-2] NAKing with 81.91.189.7 [P-2] PRINBNS 0.0.0.0 [P-2] SECDNS 0.0.0.0 [P-2] NAKing with 81.91.189.14 [P-2] SECNBNS 0.0.0.0 [P-2] IPCP: SendConfigRej #5 [P-2] PRINBNS 0.0.0.0 [P-2] SECNBNS 0.0.0.0 [P-2] IPCP: rec'd Configure Ack #1 (Req-Sent) [P-2] IPADDR 81.91.189.3 [P-2] IPCP: state change Req-Sent --> Ack-Rcvd [P-2] IPCP: rec'd Configure Request #6 (Ack-Rcvd) [P-2] IPADDR 0.0.0.0 [P-2] NAKing with 81.91.189.129 [P-2] PRIDNS 0.0.0.0 [P-2] NAKing with 81.91.189.7 [P-2] SECDNS 0.0.0.0 [P-2] NAKing with 81.91.189.14 [P-2] IPCP: SendConfigNak #6 [P-2] IPADDR 81.91.189.129 [P-2] PRIDNS 81.91.189.7 [P-2] SECDNS 81.91.189.14 [P-2] IPCP: rec'd Configure Request #7 (Ack-Rcvd) [P-2] IPADDR 81.91.189.129 [P-2] 81.91.189.129 is OK [P-2] PRIDNS 81.91.189.7 [P-2] SECDNS 81.91.189.14 [P-2] IPCP: SendConfigAck #7 [P-2] IPADDR 81.91.189.129 [P-2] PRIDNS 81.91.189.7 [P-2] SECDNS 81.91.189.14 [P-2] IPCP: state change Ack-Rcvd --> Opened [P-2] IPCP: LayerUp [P-2] 81.91.189.3 -> 81.91.189.129 [P-2] IFACE: Up event И получаю очень низкую входящую скорость. Куда смотреть, что бы найти причину этой проблемы? Share this post Link to post Share on other sites
jab Posted June 11, 2010 · Report post я же говорил, их нужно отстреливать пока маленькие... Share this post Link to post Share on other sites
Ivan_83 Posted June 11, 2010 · Report post [P-2] Bundle: Status update: up 1 link, total bandwidth 64000 bps нетграф в ядре вовсе не обязателен, мпд5 сам подгружает модулями всё что ему нужно. Share this post Link to post Share on other sites
polmax Posted June 11, 2010 · Report post И получаю очень низкую входящую скорость. Что значит очень низкую? Это сколько? Share this post Link to post Share on other sites
AntonS Posted June 11, 2010 · Report post смотреть какую скорость ты радиусом передаешь PS: внимательно посмотри что в биллинге привзал к тарифу либо еще что Share this post Link to post Share on other sites
polmax Posted June 11, 2010 · Report post смотреть какую скорость ты радиусом передаешьСудя по логам он её вообще не передаёт.От автора хотелось бы узнать как вообще скорость шейпиться, на каком уровне? В общем нужно более подробную информацию. Share this post Link to post Share on other sites
terrible Posted June 12, 2010 · Report post Что значит очень низкую? Это сколько?Это около 300 кбит/ссмотреть какую скорость ты радиусом передаешьПроверяю логин, пароль и IP звонящего, передаю только это:Reply Framed-Protocol:=PPP Reply Session-Timeout:=86400 как вообще скорость шейпиться, на каком уровне?Шейпится/полисится RADIUS-атрибутами, примерно такими, но тестирую без них: Reply Cisco-AVPair+=ip:sub-policy-Out=client1024k_outs Reply Cisco-AVPair+=ip:sub-policy-In=client1024k_in Reply mpd-limit:=out#1=all shape 1024000 192000 pass Reply mpd-limit:=in#1=all shape 1024000 192000 pass Share this post Link to post Share on other sites
terrible Posted June 14, 2010 (edited) · Report post Конфиг mpd взял с рабочего сервера. Пересобрал в GENERIC: FreeBSD 7.3-RELEASE-p1 FreeBSD 7.3-RELEASE-p1 #0: Sat Jun 12 16:05:10 MSD 2010 root@:/usr/obj/usr/src/sys/GENERIC amd64 # kldstat Id Refs Address Size Name 1 10 0xffffffff80100000 c06710 kernel 2 1 0xffffffff80e22000 19ba ng_socket.ko 3 7 0xffffffff80e24000 8f74 netgraph.ko 4 1 0xffffffff80e2d000 1852 ng_mppc.ko 5 1 0xffffffff80e2f000 247 rc4.ko 6 1 0xffffffff80e30000 a9e ng_tee.ko 7 1 0xffffffff80e31000 1a22 ng_pptpgre.ko 8 1 0xffffffff80e33000 202a ng_ksocket.ko 9 1 0xffffffff80e36000 1446 ng_iface.ko 10 1 0xffffffff80e38000 45fe ng_ppp.ko # Поднял для тестов на нём-же FTP сервер, через тоннель прокачиваю трафик на этот FTP - получаю пиковую физическую скорость (и download и upload). Если качать с другой машины через тоннель - опять медленно :( Ради интереса решил сменить встроенные IGB на доп. em, и о чудо, скорость нормализовалась. Установил драйвера igb.1.8.4, результата не дало. Причина - сетевухи, что с ними можно сделать? Edited June 14, 2010 by terrible Share this post Link to post Share on other sites
ilia_2s Posted June 14, 2010 · Report post заменить на интел? Share this post Link to post Share on other sites
terrible Posted June 14, 2010 · Report post igb это как-бы интел, em тоже Share this post Link to post Share on other sites
Hawk128 Posted June 15, 2010 · Report post А что за железо? У меня SR1600URHS - тоже на igb - молотят просто супер... Share this post Link to post Share on other sites
_longhorn_ Posted June 15, 2010 · Report post terrible Попробуйте отключить LRO. Share this post Link to post Share on other sites
terrible Posted June 16, 2010 · Report post А что за железо?SR1600UR Попробуйте отключить LRO.Выключил, помогло. Спасибо вам большое!!! Share this post Link to post Share on other sites
