Hello and thank you for your reply.
Still no luck.
I added :
gw-accounting aaa
radius-server aaa send
to the Cisco config, and with_cisco_vsa_hack is yes in radiusd.conf. If I put connect-tx-speed and connect-rx-speed to radreply together with Cisco-Data-Rate and Cisco-Xmit-Rate, authentication fails (see messages below). Otherwise authentification is ok if only Cisco-Rate attributes are present (ie without connect-rx or tx attribs).
Freeradius correctly sends an access-accept but Cisco doesn't send account-start
Any clues ?
Alex
*Mar 3 18:01:05.879: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.883: AAA/ACCT/HC(00000111): Register PPoE/A4000315 102Mbit/s, p
oll every 5m 0s
*Mar 3 18:01:05.883: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.883: AAA/ACCT/EVENT/(00000111): CALL START
*Mar 3 18:01:05.883: Getting session id for NET(00000111) : db=82FB4920
*Mar 3 18:01:05.883: AAA/ACCT(00000000): add node, session 529
*Mar 3 18:01:05.883: AAA/ACCT/NET(00000111): add, count 1
*Mar 3 18:01:05.883: AAA/ACCT/NET(00000111): Pick method list 'default'
*Mar 3 18:01:05.883: AAA/ACCT/SETMLIST(00000111): Handle 0, mlist 82EEF274, Nam
e default
*Mar 3 18:01:05.883: AAA/ACCT/EVENT/(00000111): ATTR REPLACE
*Mar 3 18:01:05.939: Getting session id for NET(00000111) : db=82FB4920
*Mar 3 18:01:05.947: AAA/ACCT/NET(00000111): Pick method list 'default'
*Mar 3 18:01:05.947: AAA/ACCT/SETMLIST(00000111): Handle 0, mlist 82EEF274, Nam
e default
*Mar 3 18:01:05.947: AAA/ACCT/EVENT/(00000111): NET DOWN
*Mar 3 18:01:05.947: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.947: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.947: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.951: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.951: AAA/ACCT/NET(00000111): Accounting record not sent
*Mar 3 18:01:05.951: AAA/ACCT(00000111): del node, session 529
*Mar 3 18:01:05.951: AAA/ACCT/NET(00000111): free_rec, count 0
*Mar 3 18:01:05.951: AAA/ACCT/NET(00000111) reccnt 0, csr FALSE, osr 0
*Mar 3 18:01:05.963: AAA/ACCT/EVENT/(00000111): NET DOWN
*Mar 3 18:01:05.963: AAA/ACCT(00000111): Duplicate action NET DOWN
*Mar 3 18:01:05.963: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.963: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.963: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.963: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.963: AAA/ACCT/HC(00000111): Deregister PPoE/A4000315
*Mar 3 18:01:05.963: AAA/ACCT/EVENT/(00000111): CALL STOP
*Mar 3 18:01:05.967: AAA/ACCT(00000111) reccnt 0, osr 0
J�r�me Warnier <[EMAIL PROTECTED]> wrote:
0bps
*Mar 3 18:01:05.883: AAA/ACCT/HC(00000111): Register PPoE/A4000315 102Mbit/s, p
oll every 5m 0s
*Mar 3 18:01:05.883: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.883: AAA/ACCT/EVENT/(00000111): CALL START
*Mar 3 18:01:05.883: Getting session id for NET(00000111) : db=82FB4920
*Mar 3 18:01:05.883: AAA/ACCT(00000000): add node, session 529
*Mar 3 18:01:05.883: AAA/ACCT/NET(00000111): add, count 1
*Mar 3 18:01:05.883: AAA/ACCT/NET(00000111): Pick method list 'default'
*Mar 3 18:01:05.883: AAA/ACCT/SETMLIST(00000111): Handle 0, mlist 82EEF274, Nam
e default
*Mar 3 18:01:05.883: AAA/ACCT/EVENT/(00000111): ATTR REPLACE
*Mar 3 18:01:05.939: Getting session id for NET(00000111) : db=82FB4920
*Mar 3 18:01:05.947: AAA/ACCT/NET(00000111): Pick method list 'default'
*Mar 3 18:01:05.947: AAA/ACCT/SETMLIST(00000111): Handle 0, mlist 82EEF274, Nam
e default
*Mar 3 18:01:05.947: AAA/ACCT/EVENT/(00000111): NET DOWN
*Mar 3 18:01:05.947: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.947: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.947: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.951: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.951: AAA/ACCT/NET(00000111): Accounting record not sent
*Mar 3 18:01:05.951: AAA/ACCT(00000111): del node, session 529
*Mar 3 18:01:05.951: AAA/ACCT/NET(00000111): free_rec, count 0
*Mar 3 18:01:05.951: AAA/ACCT/NET(00000111) reccnt 0, csr FALSE, osr 0
*Mar 3 18:01:05.963: AAA/ACCT/EVENT/(00000111): NET DOWN
*Mar 3 18:01:05.963: AAA/ACCT(00000111): Duplicate action NET DOWN
*Mar 3 18:01:05.963: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.963: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.963: AAA/ACCT/CLIENT(00000111): recv 102400000bps xmit 10240000
0bps
*Mar 3 18:01:05.963: AAA/ACCT/HC(00000111): Update PPoE/A4000315
*Mar 3 18:01:05.963: AAA/ACCT/HC(00000111): Deregister PPoE/A4000315
*Mar 3 18:01:05.963: AAA/ACCT/EVENT/(00000111): CALL STOP
*Mar 3 18:01:05.967: AAA/ACCT(00000111) reccnt 0, osr 0
J�r�me Warnier <[EMAIL PROTECTED]> wrote:
Le jeu 25/03/2004 � 14:42, Alex a �crit :
> Hello,
>
> I'm trying to set up rate-limited user access using a cisco router
> (1700) ie simulating a NAS. Clients (WinXP) connect using PPPoE to the
> router which acts as RADIUS client for freeradius. Connections are ok
> but rate limitation doesn't work at all. I tried adding
> Cisco-Data-Rate, Cisco-Data-Xmit, connect-rx-speed
> and connect-tx-speed as attributes to the radreply table but the
> router seems to ignore them (ex. username is 'test', attribute is
> 'Cisco-Data-Rate', op is '=' and value is '256' i.e. 256kbit/s).
>
> Cisco vsa hack is yes in radiusd.conf
>
> Here's the Cisco configuration:
>
> aaa group server radius PPPOE
> server 192.168.2.3 auth-port 1812 acct-port 1813
> !
> aaa authentication ppp default if-needed group radius local
> aaa authentication ppp pppoe_client group radius
> aaa authorization network default group radius
> aaa accounting update newinfo
> aaa accounting exec default start-stop group radius
> aaa accounting network default start-stop group radius
> aaa accounting connection default start-stop group radius
> aaa session-id common
I would suggest you have a look at the following archive:
http://www.freeradius.org/cgi-bin/cvsweb.cgi/~checkout~/radiusd/src/billing/README?rev=1.5&content-type=text/plain
Let me know if it helped.
> Thanx,
> Alex
--
J�r�me Warnier
Consultant
BeezNest
http://beeznest.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
