lemut Опубликовано 28 июня, 2011 · Жалоба Не активируется сервис с функцией Prepaid на Cisco 10008 PRE3 #sh ver Cisco IOS Software, 10000 Software (C10K3-P11-M), Version 12.2(31)SB18, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright © 1986-2010 by Cisco Systems, Inc. Compiled Thu 25-Mar-10 10:59 by debajpal aaa group server radius group1 server-private 10.10.2.4 auth-port 1812 acct-port 1813 key 7 03560B2D091D791A79080B014642 ip vrf forwarding SF ! aaa authentication login default local aaa authentication login local_log local aaa authentication ppp ISG group group1 aaa authorization template aaa authorization exec default local aaa authorization commands 1 default local aaa authorization commands 15 default local aaa authorization network ISG group group1 aaa authorization auth-proxy default local group group1 aaa authorization subscriber-service default local group group1 aaa authorization subscriber-service ISG group group1 aaa accounting send stop-record authentication failure vrf default aaa accounting delay-start all aaa accounting update periodic 1 aaa accounting network default start-stop group group1 aaa accounting network ISG start-stop group group1 ! aaa attribute list ISG ! aaa nas port extended ! ! aaa server radius dynamic-author client 10.10.2.4 vrf SF server-key 7 055956292E5E165F2E0405165A5C auth-type any ignore session-key ignore server-key ! subscriber feature prepaid 200M threshold time 0 seconds threshold volume 1900000000 bytes interim-interval 2 minutes method-list author ISG method-list accounting ISG password cisco interface Virtual-Template10 ip vrf forwarding SF ip unnumbered Loopback50 peer default ip address pool sfpool ppp authentication pap chap callin ISG ppp authorization ISG ppp accounting ISG radius-server attribute 44 include-in-access-req vrf SF radius-server attribute 55 include-in-acct-req radius-server retransmit 2 radius-server timeout 60 radius-server deadtime 10 radius-server directed-request radius-server vsa send cisco-nas-port radius-server vsa send accounting radius-server vsa send authentication Сервис с прейпейд загружается с радису, как и два других, которые разделяют трафик на направления, Локально и Глобальное. Данный сервис не включается, если убрать строку со *, то все три сервиса становятся активными. Cisco-AVPair := ip:traffic-class=in access-group name NO_TARIF_IN priority 50 Cisco-AVPair := ip:traffic-class=out access-group name NO_TARIF_OUT priority 50 Cisco-AVPair := ip:traffic-class=in default drop Cisco-AVPair := ip:traffic-class=out default drop Cisco-Service-Info := IPREPAID_INTERNET Cisco-Control-Info := QV20000000 *Cisco-AVPair := prepaid-config=200M Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
triam Опубликовано 28 июня, 2011 · Жалоба debug radius показывай И почему у тебя нету service-policy type control на virtual-templete'е? См. пример: http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a00801b42bf.shtml http://www.cisco.com/en/US/docs/ios-xml/ios/isg/configuration/12-2sr/Configuring_ISG_Access_for_PPP_Sessions.html Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
lemut Опубликовано 28 июня, 2011 · Жалоба Насколько я понимаю, сервисы я могу и без service-policy type control на virtual-templete подключить к сессии, если по ходу активности ни каких изменений проводить не планируется. Или активация диактивация сессий перелогиниванием планируется. На текущий момент задача простая, сделать просто картоный сервис, абонент скачал трафик, абонент идет за новой картой. bras01-surgut.hmao.ugra# Jun 28 16:35:36.062 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.062 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.062 surgut: RADIUS/ENCODE(0000002E): acct_session_id: 148 Jun 28 16:35:36.062 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.062 surgut: RADIUS(0000002E): Send Access-Request to 10.10.2.4:1812 id 1645/133, len 158 Jun 28 16:35:36.062 surgut: RADIUS: authenticator C8 0F DB EA 35 9E 1A 91 - A6 04 67 59 1C 48 FE D8 Jun 28 16:35:36.062 surgut: RADIUS: Framed-Protocol [7] 6 PPP [1] Jun 28 16:35:36.062 surgut: RADIUS: User-Name [1] 7 "test1" Jun 28 16:35:36.062 surgut: RADIUS: User-Password [2] 18 * Jun 28 16:35:36.062 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.062 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.062 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.062 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.062 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.062 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.062 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.062 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.062 surgut: RADIUS: Service-Type [6] 6 Framed [2] Jun 28 16:35:36.062 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.062 surgut: RADIUS: Acct-Session-Id [44] 10 "00000094" Jun 28 16:35:36.062 surgut: RADIUS: Received from id 1645/133 10.10.2.4:1812, Access-Accept, len 84 Jun 28 16:35:36.062 surgut: RADIUS: authenticator 7C DE E8 1C 5D 9F ED 83 - 44 52 AA 4B B1 FA 9D 74 Jun 28 16:35:36.062 surgut: RADIUS: Framed-IP-Address [8] 6 217.8.xx.xx Jun 28 16:35:36.062 surgut: RADIUS: Vendor, Cisco [26] 13 Jun 28 16:35:36.062 surgut: RADIUS: ssg-account-info [250] 7 "AW2MT" Jun 28 16:35:36.062 surgut: RADIUS: Vendor, Cisco [26] 14 Jun 28 16:35:36.062 surgut: RADIUS: ssg-account-info [250] 8 "AL10MT" Jun 28 16:35:36.062 surgut: RADIUS: Idle-Timeout [28] 6 600 Jun 28 16:35:36.062 surgut: RADIUS: Vendor, Cisco [26] 25 Jun 28 16:35:36.062 surgut: RADIUS: ssg-account-info [250] 19 "APREPAID_INTERNET" Jun 28 16:35:36.066 surgut: RADIUS(0000002E): Received from id 1645/133 Jun 28 16:35:36.066 surgut: SVM [PREPAID_INTERNET]: needs downloading Jun 28 16:35:36.066 surgut: SVM [DC00008C/PREPAID_INTERNET]: allocated version 1 Jun 28 16:35:36.066 surgut: SVM [DC00008C/PREPAID_INTERNET]: [bE0000AD]: client queued Jun 28 16:35:36.066 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Download:BE0000AD] locked 0->1 Jun 28 16:35:36.066 surgut: SVM [DC00008C/PREPAID_INTERNET]: [AAA-Download:43B083B0] locked 0->1 Jun 28 16:35:36.066 surgut: SVM [L10MT]: needs downloading Jun 28 16:35:36.066 surgut: SVM [6400008D/L10MT]: allocated version 1 Jun 28 16:35:36.066 surgut: SVM [6400008D/L10MT]: [A00000AE]: client queued Jun 28 16:35:36.066 surgut: SVM [6400008D/L10MT]: [PM-Download:A00000AE] locked 0->1 Jun 28 16:35:36.066 surgut: SVM [6400008D/L10MT]: [AAA-Download:D2DFAA60] locked 0->1 Jun 28 16:35:36.066 surgut: SVM [W2MT]: needs downloading Jun 28 16:35:36.066 surgut: SVM [8C00008E/W2MT]: allocated version 1 Jun 28 16:35:36.066 surgut: SVM [8C00008E/W2MT]: [250000AF]: client queued Jun 28 16:35:36.066 surgut: SVM [8C00008E/W2MT]: [PM-Download:250000AF] locked 0->1 Jun 28 16:35:36.066 surgut: SVM [8C00008E/W2MT]: [AAA-Download:561D6F0C] locked 0->1 Jun 28 16:35:36.066 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.066 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.066 surgut: RADIUS/ENCODE(0000002E): acct_session_id: 148 Jun 28 16:35:36.066 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.066 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.066 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.066 surgut: RADIUS/ENCODE(0000002E): acct_session_id: 148 Jun 28 16:35:36.066 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.070 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.070 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.070 surgut: RADIUS/ENCODE(0000002E): acct_session_id: 148 Jun 28 16:35:36.070 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.070 surgut: RADIUS(0000002E): Send Access-Request to 10.10.2.4:1812 id 1645/134, len 163 Jun 28 16:35:36.070 surgut: RADIUS: authenticator BF 13 6D 33 F3 87 5F 46 - EE 18 0A 2A E4 EE 5B C6 Jun 28 16:35:36.070 surgut: RADIUS: User-Name [1] 18 "PREPAID_INTERNET" Jun 28 16:35:36.070 surgut: RADIUS: User-Password [2] 18 * Jun 28 16:35:36.070 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.070 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.070 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.070 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.070 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.070 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.070 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.070 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.070 surgut: RADIUS: Service-Type [6] 6 Outbound [5] Jun 28 16:35:36.070 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.070 surgut: RADIUS: Acct-Session-Id [44] 10 "00000094" Jun 28 16:35:36.070 surgut: RADIUS(0000002E): Send Access-Request to 10.10.2.4:1812 id 1645/135, len 152 Jun 28 16:35:36.070 surgut: RADIUS: authenticator F9 EE 6A 5E FB 6E 86 0D - 21 11 A4 F6 36 08 52 EA Jun 28 16:35:36.070 surgut: RADIUS: User-Name [1] 7 "L10MT" Jun 28 16:35:36.070 surgut: RADIUS: User-Password [2] 18 * Jun 28 16:35:36.070 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.070 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.070 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.070 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.070 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.070 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.070 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.070 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.070 surgut: RADIUS: Service-Type [6] 6 Outbound [5] Jun 28 16:35:36.070 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.070 surgut: RADIUS: Acct-Session-Id [44] 10 "00000094" Jun 28 16:35:36.074 surgut: RADIUS(0000002E): Send Access-Request to 10.10.2.4:1812 id 1645/136, len 151 Jun 28 16:35:36.074 surgut: RADIUS: authenticator C2 52 A4 5A 11 14 70 E7 - C3 19 FD 09 CA 33 E7 27 Jun 28 16:35:36.074 surgut: RADIUS: User-Name [1] 6 "W2MT" Jun 28 16:35:36.074 surgut: RADIUS: User-Password [2] 18 * Jun 28 16:35:36.074 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.074 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.074 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.074 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.074 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.074 surgut: RADIUS: Service-Type [6] 6 Outbound [5] Jun 28 16:35:36.074 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.074 surgut: RADIUS: Acct-Session-Id [44] 10 "00000094" Jun 28 16:35:36.074 surgut: RADIUS: Received from id 1645/134 10.10.2.4:1812, Access-Accept, len 312 Jun 28 16:35:36.074 surgut: RADIUS: authenticator 85 2C 0F 10 4D 8E B0 5D - A3 94 D8 8B CD EE CE 36 Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 70 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 64 "ip:traffic-class=in access-group name NO_TARIF_IN priority 50" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 71 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 65 "ip:traffic-class=out access-group name NO_TARIF_OUT priority 50" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 40 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 34 "ip:traffic-class=in default drop" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 25 Jun 28 16:35:36.074 surgut: RADIUS: ssg-service-info [251] 19 "IPREPAID_INTERNET" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 18 Jun 28 16:35:36.074 surgut: RADIUS: ssg-control-info [253] 12 "QV20000000" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 27 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 21 "prepaid-config=200M" Jun 28 16:35:36.074 surgut: RADIUS(0000002E): Received from id 1645/134 Jun 28 16:35:36.074 surgut: RADIUS: Received from id 1645/135 10.10.2.4:1812, Access-Accept, len 340 Jun 28 16:35:36.074 surgut: RADIUS: authenticator D9 DD 1D 46 FD 66 8A 37 - ED 4E CD 4B FF F8 10 24 Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 62 Jun 28 16:35:36.074 surgut: RADIUS: ssg-service-info [251] 56 "QU;10240000;512000;10240000;D;10240000;512000;10240000" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 67 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 61 "ip:traffic-class=in access-group name LOCAL_IN priority 100" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 69 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 63 "ip:traffic-class=out access-group name LOCAL_OUT priority 110" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 40 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 34 "ip:traffic-class=in default drop" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop" Jun 28 16:35:36.074 surgut: bras01-surgut.hmao.ugra# RADIUS: Vendor, Cisco [26] 14 Jun 28 16:35:36.074 surgut: RADIUS: ssg-service-info [251] 8 "IL10MT" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 27 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 21 "accounting-list=ISG" Jun 28 16:35:36.074 surgut: RADIUS: Received from id 1645/136 10.10.2.4:1812, Access-Accept, len 312 Jun 28 16:35:36.074 surgut: RADIUS: authenticator DD F8 CB E8 80 DD 8A E2 - 9F 2B 07 6F 90 FD 24 8D Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 67 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 61 "ip:traffic-class=in access-group name WORLD_IN priority 200" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 69 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 63 "ip:traffic-class=out access-group name WORLD_OUT priority 210" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 40 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 34 "ip:traffic-class=in default drop" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.074 surgut: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 62 Jun 28 16:35:36.074 surgut: RADIUS: ssg-service-info [251] 56 "QU;10240000;512000;10240000;D;10240000;512000;10240000" Jun 28 16:35:36.074 surgut: RADIUS: Vendor, Cisco [26] 13 Jun 28 16:35:36.074 surgut: RADIUS: ssg-service-info [251] 7 "IW2MT" Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: TC feature info found Jun 28 16:35:36.078 surgut: SVM [7900008F/PREPAID_INTERNET]: added child Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [TC-Child:CF755260] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [TC-Parent:CF755170] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: TC flow feature info not found Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: downloaded first version Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [bE0000AD]: client download ok Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-to-client-msg:BE0000AD] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [AAA-Download:43B083B0] unlocked 1->0 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: alloc feature info Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-Feature-Info:561F8224] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: has Policy info Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Info:D11B8C48] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: populated client Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Download:BE0000AD] unlocked 1->0 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-to-client-msg:BE0000AD] unlocked 1->0 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Service:439223FC] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [sM-SIP-Apply:7900008F] locked 0->1 Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [FM-Bind:2E000088] locked 0->1 Jun 28 16:35:36.078 surgut: SSS LTERM: ERROR: Unable to set as required with CCM Jun 28 16:35:36.078 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-Feature-Info:561F8224] unlocked 1->0 Jun 28 16:35:36.078 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: alloc feature info Jun 28 16:35:36.078 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [sVM-Feature-Info:561F8224] locked 0->1 Jun 28 16:35:36.078 surgut: RADIUS(0000002E): Received from id 1645/135 Jun 28 16:35:36.078 surgut: RADIUS(0000002E): Received from id 1645/136 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: TC feature info found Jun 28 16:35:36.082 surgut: SVM [4C000090/L10MT]: added child Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [TC-Child:CF7552D8] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [4C000090/CHILD/L10MT]: [TC-Parent:CF7551E8] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: TC flow feature info found Jun 28 16:35:36.082 surgut: SVM [4C000090/CHILD/L10MT]: set accounting handle Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: downloaded first version Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [A00000AE]: client download ok Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [sVM-to-client-msg:A00000AE] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [AAA-Download:D2DFAA60] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: TC feature info found Jun 28 16:35:36.082 surgut: SVM [78000091/W2MT]: added child Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [TC-Child:CF7553C8] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [78000091/CHILD/W2MT]: [TC-Parent:CF755350] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: TC flow feature info found Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: downloaded first version Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [250000AF]: client download ok Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [sVM-to-client-msg:250000AF] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [AAA-Download:561D6F0C] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [FM-Bind:9A000089] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [sVM-Feature-Info:561F8224] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: alloc feature info Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [sVM-Feature-Info:561F8224] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: has Policy info Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [PM-Info:D11B8F90] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: populated client Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [PM-Download:A00000AE] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [sVM-to-client-msg:A00000AE] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [PM-Service:43922414] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: alloc feature info Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [sVM-Feature-Info:561F820C] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: has Policy info Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [PM-Info:D11BA458] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: populated client Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [PM-Download:250000AF] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [sVM-to-client-msg:250000AF] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [8C00008E/W2MT]: [PM-Service:439223E4] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [4C000090/CHILD/L10MT]: [sM-SIP-Apply:4C000090] locked 0->1 Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [FM-Bind:2E000088] locked 0->1 Jun 28 16:35:36.082 surgut: SSS LTERM: ERROR: Unable to set as required with CCM Jun 28 16:35:36.082 surgut: SVM [6400008D/L10MT]: [sVM-Feature-Info:561F8224] unlocked 1->0 Jun 28 16:35:36.082 surgut: SVM [4C000090/CHILD/L10MT]: alloc feature info Jun 28 16:35:36.082 surgut: SVM [4C000090/CHILD/L10MT]: [sVM-Feature-Info:561F8224] locked 0->1 Jun 28 16:35:36.086 surgut: SVM [6400008D/L10MT]: [Accounting-Feature:43A2D888] locked 0->1 Jun 28 16:35:36.086 surgut: SVM [4C000090/CHILD/L10MT]: [FM-Bind:BE00008A] locked 0->1 Jun 28 16:35:36.086 surgut: SVM [4C000090/CHILD/L10MT]: [sVM-Feature-Info:561F8224] unlocked 1->0 Jun 28 16:35:36.086 surgut: SVM [78000091/CHILD/W2MT]: [sM-SIP-Apply:78000091] locked 0->1 Jun 28 16:35:36.086 surgut: SVM [8C00008E/W2MT]: [FM-Bind:2E000088] locked 0->1 Jun 28 16:35:36.086 surgut: SSS LTERM: ERROR: Unable to set as required with CCM Jun 28 16:35:36.086 surgut: SVM [8C00008E/W2MT]: [sVM-Feature-Info:561F820C] unlocked 1->0 Jun 28 16:35:36.086 surgut: SVM [78000091/CHILD/W2MT]: alloc feature info Jun 28 16:35:36.086 surgut: SVM [78000091/CHILD/W2MT]: [sVM-Feature-Info:561F820C] locked 0->1 Jun 28 16:35:36.086 surgut: SVM [78000091/CHILD/W2MT]: [FM-Bind:3700008B] locked 0->1 Jun 28 16:35:36.086 surgut: SVM [78000091/CHILD/W2MT]: [sVM-Feature-Info:561F820C] unlocked 1->0 Jun 28 16:35:36.094 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.094 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.094 surgut: RADIUS/ENCODE(0000002E): acct_session_id: 149 Jun 28 16:35:36.094 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.094 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.094 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.094 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.094 surgut: RADIUS/ENCODE(0000002E):Orig. component type = PPoE Jun 28 16:35:36.094 surgut: RADIUS(0000002E): Config NAS IP: 217.8.zz.zz Jun 28 16:35:36.094 surgut: RADIUS(0000002E): sending Jun 28 16:35:36.094 surgut: RADIUS(0000002E): Send Access-Request to 10.10.2.4:1812 id 1645/137, len 183 Jun 28 16:35:36.094 surgut: RADIUS: authenticator 2E 01 9D 74 40 27 3E 79 - D5 16 21 48 65 6A 3F 4F Jun 28 16:35:36.094 surgut: RADIUS: User-Name [1] 7 "test1" Jun 28 16:35:36.094 surgut: RADIUS: User-Password [2] 18 * Jun 28 16:35:36.094 surgut: RADIUS: Vendor, Cisco [26] 25 Jun 28 16:35:36.094 surgut: RADIUS: ssg-service-info [251] 19 "NPREPAID_INTERNET" Jun 28 16:35:36.094 surgut: RADIUS: Framed-Protocol [7] 6 PPP [1] Jun 28 16:35:36.094 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.094 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.094 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.094 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.094 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.094 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.094 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.094 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.094 surgut: RADIUS: Service-Type [6] 6 Framed [2] Jun 28 16:35:36.094 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.094 surgut: RADIUS: Acct-Session-Id [44] 10 "00000095" Jun 28 16:35:36.094 surgut: RADIUS(0000002E): Send Accounting-Request to 10.10.2.4:1813 id 1646/113, len 205 Jun 28 16:35:36.094 surgut: RADIUS: authenticator B5 AB 9D 97 6A 74 92 64 - 0E 6B E0 CC 1D 85 CF 3A Jun 28 16:35:36.094 surgut: RADIUS: Acct-Session-Id [44] 10 "00000094" Jun 28 16:35:36.094 surgut: RADIUS: Framed-Protocol [7] 6 PPP [1] Jun 28 16:35:36.094 surgut: RADIUS: Framed-IP-Address [8] 6 217.8.xx.xx Jun 28 16:35:36.094 surgut: RADIUS: User-Name [1] 7 "test1" Jun 28 16:35 bras01-surgut.hmao.ugra#:36.094 surgut: RADIUS: Vendor, Cisco [26] 35 Jun 28 16:35:36.094 surgut: RADIUS: Cisco AVpair [1] 29 "connect-progress=LAN Ses Up" Jun 28 16:35:36.094 surgut: RADIUS: Acct-Authentic [45] 6 RADIUS [1] Jun 28 16:35:36.094 surgut: RADIUS: Acct-Status-Type [40] 6 Start [1] Jun 28 16:35:36.094 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.094 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.094 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.094 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.094 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.094 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.098 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.098 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.098 surgut: RADIUS: Service-Type [6] 6 Framed [2] Jun 28 16:35:36.098 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.098 surgut: RADIUS: Event-Timestamp [55] 6 1309257336 Jun 28 16:35:36.098 surgut: RADIUS: Acct-Delay-Time [41] 6 0 Jun 28 16:35:36.098 surgut: RADIUS(0000002E): Send Accounting-Request to 10.10.2.4:1813 id 1646/114, len 212 Jun 28 16:35:36.098 surgut: RADIUS: authenticator 2A 90 19 2E 6A 67 9D 94 - E5 64 29 3B 2B 81 F9 9E Jun 28 16:35:36.098 surgut: RADIUS: Acct-Session-Id [44] 10 "00000096" Jun 28 16:35:36.098 surgut: RADIUS: Framed-Protocol [7] 6 PPP [1] Jun 28 16:35:36.098 surgut: RADIUS: Vendor, Cisco [26] 14 Jun 28 16:35:36.098 surgut: RADIUS: ssg-service-info [251] 8 "NL10MT" Jun 28 16:35:36.098 surgut: RADIUS: Vendor, Cisco [26] 34 Jun 28 16:35:36.098 surgut: RADIUS: Cisco AVpair [1] 28 "parent-session-id=00000094" Jun 28 16:35:36.098 surgut: RADIUS: Framed-IP-Address [8] 6 217.8.xx.xx Jun 28 16:35:36.098 surgut: RADIUS: User-Name [1] 7 "test1" Jun 28 16:35:36.098 surgut: RADIUS: Acct-Status-Type [40] 6 Start [1] Jun 28 16:35:36.098 surgut: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Jun 28 16:35:36.098 surgut: RADIUS: Vendor, Cisco [26] 17 Jun 28 16:35:36.098 surgut: RADIUS: cisco-nas-port [2] 11 "1/0/0/304" Jun 28 16:35:36.098 surgut: RADIUS: NAS-Port [5] 6 0 Jun 28 16:35:36.098 surgut: RADIUS: NAS-Port-Id [87] 11 "1/0/0/304" Jun 28 16:35:36.098 surgut: RADIUS: Connect-Info [77] 4 "SF" Jun 28 16:35:36.098 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 28 16:35:36.098 surgut: RADIUS: Cisco AVpair [1] 35 "client-mac-address=0016.d46a.0344" Jun 28 16:35:36.098 surgut: RADIUS: Service-Type [6] 6 Framed [2] Jun 28 16:35:36.098 surgut: RADIUS: NAS-IP-Address [4] 6 217.8.zz.zz Jun 28 16:35:36.098 surgut: RADIUS: Event-Timestamp [55] 6 1309257336 Jun 28 16:35:36.098 surgut: RADIUS: Acct-Delay-Time [41] 6 0 Jun 28 16:35:36.098 surgut: RADIUS: Received from id 1646/113 10.10.2.4:1813, Accounting-response, len 20 Jun 28 16:35:36.098 surgut: RADIUS: authenticator D7 AB 42 54 C8 7B C4 BE - 49 76 1F 93 63 9B 68 BE Jun 28 16:35:36.098 surgut: RADIUS: Received from id 1646/114 10.10.2.4:1813, Accounting-response, len 20 Jun 28 16:35:36.098 surgut: RADIUS: authenticator 95 B3 F0 F5 AB 0F 24 C0 - 9E 9C CB 43 C0 A7 77 3C Jun 28 16:35:37.098 surgut: RADIUS: Received from id 1645/137 10.10.2.4:1812, Access-Reject, len 20 Jun 28 16:35:37.098 surgut: RADIUS: authenticator 28 44 22 B1 EF 88 EA 2C - 0D 97 F2 56 63 EC 70 66 Jun 28 16:35:37.098 surgut: RADIUS(0000002E): Received from id 1645/137 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: already downloaded; sharing Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [bE0000AD]: client download ok Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-to-client-msg:BE0000AD] locked 0->1 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Download:BE0000AD] locked 0->1 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: alloc feature info Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: is a feature remove Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-Feature-Info:561F820C] locked 0->1 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: populated client Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Download:BE0000AD] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-to-client-msg:BE0000AD] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [FM-Bind:2E000088] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [sVM-Feature-Info:561F820C] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Service:439223FC] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [FM-Bind:9A000089] unlocked 1->0 Jun 28 16:35:37.098 surgut: SSS LTERM: ERROR: Invalid session received from SSM Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: [PM-Info:D11B8C48] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: [sM-SIP-Apply:7900008F] unlocked 1->0 Jun 28 16:35:37.098 surgut: SVM [DC00008C/PREPAID_INTERNET]: breaking parent-child lock Jun 28 16:35:37.098 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: breaking parent-child lock Jun 28 16:35:37.098 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: destroy Jun 28 16:35:37.102 surgut: SVM [DC00008C/PREPAID_INTERNET]: destroy bras01-surgut.hmao.ugra#sh sss ses de Current Subscriber Information: Total sessions 1 -------------------------------------------------- Unique Session ID: 103 Identifier: test1 SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 00:02:38, Last Changed: 00:02:37 Interface: Virtual-Access2.1 Policy information: Context 43874578: Handle C50000AC AAA_id 0000002E: Flow_handle 0 Authentication status: authen Downloaded User profile, excluding services: addr 217.8.xx.xx ssg-account-info "AW2MT" ssg-account-info "AL10MT" idletime 600 (0x258) ssg-account-info "APREPAID_INTERNET" Downloaded User profile, including services: addr 217.8.xx.xx ssg-account-info "AW2MT" ssg-account-info "AL10MT" idletime 600 (0x258) ssg-account-info "APREPAID_INTERNET" accounting-list "ISG" traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Config history for session (recent to oldest): Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Unapplied) (Service) Profile name: PREPAID_INTERNET, 3 references traffic-class "in access-group name NO_TARIF_IN priority 50" traffic-class "out access-group name NO_TARIF_OUT priority 50" traffic-class "out default drop" traffic-class "in default drop" ssg-service-info "IPREPAID_INTERNET" ssg-control-info "QV20000000" Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Service) Profile name: W2MT, 4 references traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Service) Profile name: L10MT, 4 references ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" traffic-class "in access-group name LOCAL_IN priority 100" traffic-class "out access-group name LOCAL_OUT priority 110" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "IL10MT" accounting-list "ISG" Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Service) Profile name: PREPAID_INTERNET, 3 references traffic-class "in access-group name NO_TARIF_IN priority 50" traffic-class "out access-group name NO_TARIF_OUT priority 50" traffic-class "out default drop" traffic-class "in default drop" ssg-service-info "IPREPAID_INTERNET" ssg-control-info "QV20000000" Access-type: PPP Client: SM Policy event: Process Config Connecting Profile name: test1, 2 references addr 217.8.xx.xx ssg-account-info "AW2MT" ssg-account-info "AL10MT" idletime 600 (0x258) ssg-account-info "APREPAID_INTERNET" Active services associated with session: name "W2MT" name "L10MT" Session inbound features: Traffic classes: Traffic class session ID: 105 ACL Name: LOCAL_IN, Packets = 151, Bytes = 9110 Traffic class session ID: 106 ACL Name: WORLD_IN, Packets = 10, Bytes = 1526 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Session outbound features: Feature: PPP Idle Timeout Timeout value is 600 Idle time is 00:00:11 Traffic classes: Traffic class session ID: 105 ACL Name: LOCAL_OUT, Packets = 148, Bytes = 9843 Traffic class session ID: 106 ACL Name: WORLD_OUT, Packets = 2, Bytes = 274 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 217.8.xx.xx (F/F) Address Pool: [None] (F) Unnumbered Intf: [None] Configuration sources associated with this session: Service: W2MT, Active Time = 00:02:39 Service: L10MT, Active Time = 00:02:39 AAA Service ID = 3690987574 Interface: Virtual-Template10, Active Time = 00:02:39 -------------------------------------------------- Unique Session ID: 106 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 00:02:39, Last Changed: 00:02:39 Policy information: Context 43874110: Handle 250000AF AAA_id 0000002E: Flow_handle 0 Authentication status: unauthen Downloaded User profile, including services: traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Config history for session (recent to oldest): Access-type: Web-service-logon Client: Service Command-Handler Policy event: Service-Start (Service) Profile name: W2MT, 4 references traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Session inbound features: Feature: Policing Upstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Session outbound features: Feature: Policing Dnstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Configuration sources associated with this session: Service: W2MT, Active Time = 00:02:39 -------------------------------------------------- Unique Session ID: 105 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 00:02:39, Last Changed: 00:02:39 Policy information: Context 43874288: Handle A00000AE AAA_id 0000002E: Flow_handle 2 Authentication status: unauthen Downloaded User profile, including services: ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" traffic-class "in access-group name LOCAL_IN priority 100" traffic-class "out access-group name LOCAL_OUT priority 110" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "IL10MT" accounting-list "ISG" Config history for session (recent to oldest): Access-type: Web-service-logon Client: Service Command-Handler Policy event: Service-Start (Service) Profile name: L10MT, 4 references ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" traffic-class "in access-group name LOCAL_IN priority 100" traffic-class "out access-group name LOCAL_OUT priority 110" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "IL10MT" accounting-list "ISG" Session inbound features: Feature: Service accounting Service: L10MT Method List: ISG Packets = 151, Bytes = 9110 Feature: Policing Upstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Session outbound features: Feature: Service accounting Service: L10MT Method List: ISG Packets = 148, Bytes = 9843 Feature: Policing Dnstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Configuration sources associated with this session: Service: L10MT, Active Time = 00:02:39 Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
triam Опубликовано 28 июня, 2011 · Жалоба ssg-account-info "APREPAID_INTERNET" Active services associated with session: name "W2MT" name "L10MT" =) Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
lemut Опубликовано 28 июня, 2011 · Жалоба Именно так name "W2MT" name "L10MT" Это два серивиса, безо всяких препейдов, они стартуют вообще без проблем, третий сервис, не хочет на сессию прицеплятся Jun 28 16:35:37.098 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: breaking parent-child lock Jun 28 16:35:37.098 surgut: SVM [7900008F/CHILD/PREPAID_INTERNET]: destroy Jun 28 16:35:37.102 surgut: SVM [DC00008C/PREPAID_INTERNET]: destroy Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
triam Опубликовано 29 июня, 2011 · Жалоба А есть ли ACL'и NO_TARIF_IN, NO_TARIF_OUT, LOCAL_IN и LOCAL_OUT ? Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
lemut Опубликовано 29 июня, 2011 · Жалоба Да ACL имеются. Это точно Влияет на сервис только эта строчка , без нее сервис уходит в активность *Cisco-AVPair := prepaid-config=200M bras01-surgut.hmao.ugra#sh sss session Current Subscriber Information: Total sessions 1 Uniq ID Interface State Service Identifier Up-time 111 Vi2.1 authen Local Term test1 00:00:10 112 Traffic-Clas unauthen Ltm Internal 00:00:10 113 Traffic-Clas unauthen Ltm Internal 00:00:10 114 Traffic-Clas unauthen Ltm Internal 00:00:10 bras01-surgut.hmao.ugra#sh sss session detailed Current Subscriber Information: Total sessions 1 -------------------------------------------------- Unique Session ID: 111 Identifier: test1 SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 00:00:16, Last Changed: 00:00:16 Interface: Virtual-Access2.1 Policy information: Context 43874578: Handle 460000BA AAA_id 00000031: Flow_handle 0 Authentication status: authen Downloaded User profile, excluding services: addr 217.8.xx.yy ssg-account-info "AW2MT" ssg-account-info "AL10MT" idletime 600 (0x258) ssg-account-info "APREPAID_INTERNET" Downloaded User profile, including services: addr 217.8.xx.yy ssg-account-info "AW2MT" ssg-account-info "AL10MT" idletime 600 (0x258) ssg-account-info "APREPAID_INTERNET" ssg-control-info "QV20000000" accounting-list "ISG" traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Config history for session (recent to oldest): Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Service) Profile name: W2MT, 4 references traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Service) Profile name: L10MT, 4 references ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" traffic-class "in access-group name LOCAL_IN priority 100" traffic-class "out access-group name LOCAL_OUT priority 110" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "IL10MT" accounting-list "ISG" Access-type: Web-service-logon Client: SM Policy event: Apply Config Success (Service) Profile name: PREPAID_INTERNET, 4 references traffic-class "in access-group name NO_TARIF_IN priority 50" traffic-class "out access-group name NO_TARIF_OUT priority 50" traffic-class "out default drop" traffic-class "in default drop" ssg-service-info "IPREPAID_INTERNET" ssg-control-info "QV20000000" accounting-list "ISG" Access-type: PPP Client: SM Policy event: Process Config Connecting Profile name: test1, 2 references addr 217.8.xx.yy ssg-account-info "AW2MT" ssg-account-info "AL10MT" idletime 600 (0x258) ssg-account-info "APREPAID_INTERNET" Active services associated with session: name "W2MT" name "L10MT" name "PREPAID_INTERNET" Session inbound features: Traffic classes: Traffic class session ID: 112 ACL Name: NO_TARIF_IN, Packets = 0, Bytes = 0 Traffic class session ID: 113 ACL Name: LOCAL_IN, Packets = 32, Bytes = 1968 Traffic class session ID: 114 ACL Name: WORLD_IN, Packets = 10, Bytes = 1708 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Session outbound features: Feature: PPP Idle Timeout Timeout value is 600 Idle time is 00:00:11 Traffic classes: Traffic class session ID: 112 ACL Name: NO_TARIF_OUT, Packets = 0, Bytes = 0 Traffic class session ID: 113 ACL Name: LOCAL_OUT, Packets = 29, Bytes = 3215 Traffic class session ID: 114 ACL Name: WORLD_OUT, Packets = 4, Bytes = 548 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 217.8.xx.yy (F/F) Address Pool: [None] (F) Unnumbered Intf: [None] Configuration sources associated with this session: Service: W2MT, Active Time = 00:00:53 Service: L10MT, Active Time = 00:00:53 AAA Service ID = 2197815354 Service: PREPAID_INTERNET, Active Time = 00:00:53 AAA Service ID = 1946157113 Interface: Virtual-Template10, Active Time = 00:00:53 -------------------------------------------------- Unique Session ID: 112 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 00:00:53, Last Changed: 00:00:53 Policy information: Context 43874110: Handle 750000BB AAA_id 00000031: Flow_handle 1 Authentication status: unauthen Downloaded User profile, including services: traffic-class "in access-group name NO_TARIF_IN priority 50" traffic-class "out access-group name NO_TARIF_OUT priority 50" traffic-class "out default drop" traffic-class "in default drop" ssg-service-info "IPREPAID_INTERNET" ssg-control-info "QV20000000" accounting-list "ISG" Config history for session (recent to oldest): Access-type: Web-service-logon Client: Service Command-Handler Policy event: Service-Start (Service) Profile name: PREPAID_INTERNET, 4 references traffic-class "in access-group name NO_TARIF_IN priority 50" traffic-class "out access-group name NO_TARIF_OUT priority 50" traffic-class "out default drop" traffic-class "in default drop" ssg-service-info "IPREPAID_INTERNET" ssg-control-info "QV20000000" accounting-list "ISG" Session inbound features: Feature: Service accounting Service: PREPAID_INTERNET Method List: ISG Packets = 0, Bytes = 0 Session outbound features: Feature: Service accounting Service: PREPAID_INTERNET Method List: ISG Packets = 0, Bytes = 0 Configuration sources associated with this session: Service: PREPAID_INTERNET, Active Time = 00:01:00 -------------------------------------------------- Unique Session ID: 113 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 00:01:00, Last Changed: 00:01:00 Policy information: Context 43874400: Handle 2D0000BC AAA_id 00000031: Flow_handle 2 Authentication status: unauthen Downloaded User profile, including services: ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" traffic-class "in access-group name LOCAL_IN priority 100" traffic-class "out access-group name LOCAL_OUT priority 110" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "IL10MT" accounting-list "ISG" Config history for session (recent to oldest): Access-type: Web-service-logon Client: Service Command-Handler Policy event: Service-Start (Service) Profile name: L10MT, 4 references ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" traffic-class "in access-group name LOCAL_IN priority 100" traffic-class "out access-group name LOCAL_OUT priority 110" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "IL10MT" accounting-list "ISG" Session inbound features: Feature: Service accounting Service: L10MT Method List: ISG Packets = 62, Bytes = 3768 Feature: Policing Upstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Session outbound features: Feature: Service accounting Service: L10MT Method List: ISG Packets = 59, Bytes = 5015 Feature: Policing Dnstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Configuration sources associated with this session: Service: L10MT, Active Time = 00:04:10 -------------------------------------------------- Unique Session ID: 114 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 00:04:10, Last Changed: 00:04:10 Policy information: Context 43874288: Handle AC0000BD AAA_id 00000031: Flow_handle 0 Authentication status: unauthen Downloaded User profile, including services: traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Config history for session (recent to oldest): Access-type: Web-service-logon Client: Service Command-Handler Policy event: Service-Start (Service) Profile name: W2MT, 4 references traffic-class "in access-group name WORLD_IN priority 200" traffic-class "out access-group name WORLD_OUT priority 210" traffic-class "in default drop" traffic-class "out default drop" ssg-service-info "QU;10240000;512000;10240000;D;10240000;512000;10240000" ssg-service-info "IW2MT" Session inbound features: Feature: Policing Upstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Session outbound features: Feature: Policing Dnstream Params: Average rate = 10240000, Normal burst = 512000, Excess burst = 10240000 Config level = Service Configuration sources associated with this session: Service: W2MT, Active Time = 00:04:10 Вот сервисы без злопалучной строчки. Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
dead0001 Опубликовано 29 июня, 2011 (изменено) · Жалоба В сервисе PREPAID_INTERNET не должна передаваться квота. Она передается в Access-accept при первоначальной аутентификации пользователя. В сервисе только prepaid-config. :) Зачем в "subscriber feature prepaid 200M" значение threshold volume такое большое? Изменено 29 июня, 2011 пользователем dead0001 Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
lemut Опубликовано 30 июня, 2011 · Жалоба subscriber feature prepaid 200M порог исправил. А если квота не придет? то и сервис не активируется? Видимо я не правильно понял, что Access-accept передаются все параметры сервиса при старте, в том числе и квота Вот так я вижу пакеты Без квоты и препейда Jun 30 12:09:46.178 surgut: RADIUS: Received from id 1645/152 10.10.2.4:1812, Access-Accept, len 305 Jun 30 12:09:46.178 surgut: RADIUS: authenticator 8B 82 78 4C EB 87 F2 F8 - 25 25 17 9C 48 36 15 DD Jun 30 12:09:46.178 surgut: RADIUS: Vendor, Cisco [26] 70 Jun 30 12:09:46.178 surgut: RADIUS: Cisco AVpair [1] 64 "ip:traffic-class=in access-group name NO_TARIF_IN priority 50" Jun 30 12:09:46.178 surgut: RADIUS: Vendor, Cisco [26] 71 Jun 30 12:09:46.178 surgut: RADIUS: Cisco AVpair [1] 65 "ip:traffic-class=out access-group name NO_TARIF_OUT priority 50" Jun 30 12:09:46.178 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 30 12:09:46.178 surgut: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop" Jun 30 12:09:46.178 surgut: RADIUS: Vendor, Cisco [26] 40 Jun 30 12:09:46.178 surgut: RADIUS: Cisco AVpair [1] 34 "ip:traffic-class=in default drop" Jun 30 12:09:46.178 surgut: RADIUS: Vendor, Cisco [26] 25 Jun 30 12:09:46.178 surgut: RADIUS: ssg-service-info [251] 19 "IPREPAID_INTERNET" Jun 30 12:09:46.178 surgut: RADIUS: Vendor, Cisco [26] 38 Jun 30 12:09:46.178 surgut: RADIUS: Cisco AVpair [1] 32 "subscriber:accounting-list=ISG" С квотой и без препейда Jun 30 12:14:53.061 surgut: RADIUS: Received from id 1645/156 10.10.2.4:1812, Access-Accept, len 323 Jun 30 12:14:53.061 surgut: RADIUS: authenticator 5E 45 4E B5 C7 B0 73 5E - 00 7A 43 B3 4E 1D 5E 0C Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 70 Jun 30 12:14:53.061 surgut: RADIUS: Cisco AVpair [1] 64 "ip:traffic-class=in access-group name NO_TARIF_IN priority 50" Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 71 Jun 30 12:14:53.061 surgut: RADIUS: Cisco AVpair [1] 65 "ip:traffic-class=out access-group name NO_TARIF_OUT priority 50" Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 30 12:14:53.061 surgut: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop" Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 40 Jun 30 12:14:53.061 surgut: RADIUS: Cisco AVpair [1] 34 "ip:traffic-class=in default drop" Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 25 Jun 30 12:14:53.061 surgut: RADIUS: ssg-service-info [251] 19 "IPREPAID_INTERNET" Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 38 Jun 30 12:14:53.061 surgut: RADIUS: Cisco AVpair [1] 32 "subscriber:accounting-list=ISG" Jun 30 12:14:53.061 surgut: RADIUS: Vendor, Cisco [26] 18 Jun 30 12:14:53.061 surgut: RADIUS: ssg-control-info [253] 12 "QV20000000" Без квоты и с препейдом Jun 30 12:17:52.967 surgut: RADIUS: Received from id 1645/160 10.10.2.4:1812, Access-Accept, len 332 Jun 30 12:17:52.967 surgut: RADIUS: authenticator 9B 3C E2 D0 A3 2C D8 A6 - 27 2D E6 15 95 1D 5E 7F Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 70 Jun 30 12:17:52.967 surgut: RADIUS: Cisco AVpair [1] 64 "ip:traffic-class=in access-group name NO_TARIF_IN priority 50" Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 71 Jun 30 12:17:52.967 surgut: RADIUS: Cisco AVpair [1] 65 "ip:traffic-class=out access-group name NO_TARIF_OUT priority 50" Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 41 Jun 30 12:17:52.967 surgut: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop" Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 40 Jun 30 12:17:52.967 surgut: RADIUS: Cisco AVpair [1] 34 "ip:traffic-class=in default drop" Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 25 Jun 30 12:17:52.967 surgut: RADIUS: ssg-service-info [251] 19 "IPREPAID_INTERNET" Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 38 Jun 30 12:17:52.967 surgut: RADIUS: Cisco AVpair [1] 32 "subscriber:accounting-list=ISG" Jun 30 12:17:52.967 surgut: RADIUS: Vendor, Cisco [26] 27 Jun 30 12:17:52.967 surgut: RADIUS: Cisco AVpair [1] 21 "prepaid-config=200M" Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
dead0001 Опубликовано 30 июня, 2011 · Жалоба Вот так может выглядеть профиль пользователя для препейда: Framed-IP-Address = xxx.xxx.xxx.xxx Framed-IP-Netmask = 255.255.255.255 Account-Info = "Aprepaid" Control-Info = “QV5000000” А вот так сам сервис: ip:traffic-class=in access-group 100 ip:traffic-class=out access-group 100 prepaid-config=conf-prepaid Вот тут есть презентация по ISG может поможет: http://old.ciscoexpo.ru/moscow/2006/download/Service_Control_vleonov-RUS.pdf Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...
lemut Опубликовано 3 августа, 2011 · Жалоба Сервис на текущий момент активируется. Но проблема в том что почему то при совпадении паролей в данной секции с паролем абонента. Что очень и очень странно. subscriber feature prepaid 200M threshold time 10 seconds threshold volume 2 Mbytes interim-interval 1 minutes method-list author ISG method-list accounting ISG password cisco Как добится того что бы не было подобной привязки? На всех лабах используется один и тот же пароль и все хорошо... Прелагаю логи FreeRadiusa Wed Aug 3 16:40:46 2011 Packet-Type = Access-Request Framed-Protocol = PPP User-Name = "test1" NAS-Port-Type = Virtual Cisco-NAS-Port = "1/0/0/304" NAS-Port = 0 NAS-Port-Id = "1/0/0/304" Connect-Info = "SF" Cisco-AVPair = "client-mac-address=0011.2233.4455" Service-Type = Framed-User NAS-IP-Address = 217.8.xx.yyy Acct-Session-Id = "00000496" Wed Aug 3 16:40:46 2011 Packet-Type = Access-Request User-Name = "L10MT" NAS-Port-Type = Virtual Cisco-NAS-Port = "1/0/0/304" NAS-Port = 0 NAS-Port-Id = "1/0/0/304" Connect-Info = "SF" Cisco-AVPair = "client-mac-address=0011.2233.4455" Service-Type = Outbound-User NAS-IP-Address = 217.8.xx.yyy Acct-Session-Id = "00000496" Wed Aug 3 16:40:46 2011 Packet-Type = Access-Request User-Name = "W2MT" NAS-Port-Type = Virtual Cisco-NAS-Port = "1/0/0/304" NAS-Port = 0 NAS-Port-Id = "1/0/0/304" Connect-Info = "SF" Cisco-AVPair = "client-mac-address=0011.2233.4455" Service-Type = Outbound-User NAS-IP-Address = 217.8.xx.yyy Acct-Session-Id = "00000496" Wed Aug 3 16:40:46 2011 Packet-Type = Access-Request User-Name = "test1" Cisco-Service-Info = "NW2MT" Framed-Protocol = PPP NAS-Port-Type = Virtual Cisco-NAS-Port = "1/0/0/304" NAS-Port = 0 NAS-Port-Id = "1/0/0/304" Connect-Info = "SF" Cisco-AVPair = "client-mac-address=0011.2233.4455" Service-Type = Framed-User NAS-IP-Address = 217.8.xx.yyy Acct-Session-Id = "00000497" Ответы радиуса Wed Aug 3 16:40:46 2011 Packet-Type = Access-Accept Framed-IP-Address := 217.8.xx.zz Cisco-Account-Info := "AW2MT" Cisco-Account-Info := "AL10MT" Idle-Timeout := 600 Cisco-Control-Info := "QV20000000" Wed Aug 3 16:40:46 2011 Packet-Type = Access-Accept Cisco-Service-Info := "QU;10240000;512000;10240000;D;10240000;512000;10240000" Cisco-AVPair := "ip:traffic-class=in access-group name LOCAL_IN priority 100" Cisco-AVPair := "ip:traffic-class=out access-group name LOCAL_OUT priority 110" Cisco-AVPair := "ip:traffic-class=in default drop" Cisco-AVPair := "ip:traffic-class=out default drop" Cisco-Service-Info := "IL10MT" Cisco-AVPair := "accounting-list=ISG" Wed Aug 3 16:40:46 2011 Packet-Type = Access-Accept Cisco-AVPair := "ip:traffic-class=in access-group name WORLD_IN priority 200" Cisco-AVPair := "ip:traffic-class=out access-group name WORLD_OUT priority 210" Cisco-AVPair := "ip:traffic-class=in default drop" Cisco-AVPair := "ip:traffic-class=out default drop" Cisco-Service-Info := "QU;10240000;512000;10240000;D;10240000;512000;10240000" Cisco-Service-Info := "IW2MT" Cisco-AVPair := "prepaid-config=200M" Wed Aug 3 16:40:46 2011 Packet-Type = Access-Reject Framed-IP-Address := 217.8.xx.bb Cisco-Account-Info := "AW2MT" Cisco-Account-Info := "AL10MT" Idle-Timeout := 600 Cisco-Control-Info := "QV20000000" В случаи если пароль в препейд конфиге совпадает с пользовательским по последнем запросу приходит Accept Вставить ник Цитата Ответить с цитированием Поделиться сообщением Ссылка на сообщение Поделиться на других сайтах More sharing options...