In the "Start"-Packets and "Interim-Update"-Packets it seems to be right.

But ALL the "Stop"-Packets have 0 as NAS-Port.

So, you agree that this is a bug of the Access-Point?

Thank you for your reply.

Wolfgang Burger

Hello, I've got three WG102 Access Points from Netgear. I'm using the latest firmware Version 4.0.27 because it should "Fixed the issue that 802.1x Authentication does not work with machine authentication"

But I can confirm that the accounting it still NOT working everytime. Looking into my logfiles I can see that the cases which worked fine everytime the same port is used.
Here are two examples, the first one worked fine, the Session-Id is always the 
same:
Wed Aug 13 20:05:14 2008
        Service-Type = Framed-User
        Acct-Status-Type = Start
        User-Name = "test1"
        Framed-MTU = 1488
        Acct-Session-Id = "       1"
        Acct-Authentic = RADIUS
        Acct-Delay-Time = 0
        Called-Station-Id = "00184DC8XXXX:Network"
        Calling-Station-Id = "001A73XXXXXX"
        NAS-Identifier = "APBuero"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 11Mbps 802.11b"
        NAS-IP-Address = 192.168.XX.XX
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
        Acct-Unique-Session-Id = "866e0c5655a05a0b"
        Timestamp = 1218650714
        Request-Authenticator = Verified


Wed Aug 13 20:10:13 2008
        Service-Type = Framed-User
        Acct-Status-Type = Interim-Update
        User-Name = "test1"
        Framed-MTU = 1488
        Acct-Session-Id = "       1"
        Acct-Authentic = RADIUS
        Acct-Session-Time = 299
        Acct-Delay-Time = 0
        Called-Station-Id = "00184DC8XXXX:Network"
        Calling-Station-Id = "001A73XXXXXX"
        NAS-Identifier = "APBuero"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 11Mbps 802.11b"
        NAS-IP-Address = 192.168.XX.XX
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
        Acct-Unique-Session-Id = "866e0c5655a05a0b"
        Timestamp = 1218651013
        Request-Authenticator = Verified


Wed Aug 13 20:34:33 2008
        Service-Type = Framed-User
        Acct-Status-Type = Stop
        User-Name = "test1"
        Framed-MTU = 1488
        Acct-Session-Id = "       1"
        Acct-Authentic = RADIUS
        Acct-Session-Time = 1758
        Acct-Terminate-Cause = User-Request
        Acct-Delay-Time = 0
        Called-Station-Id = "00184DC8XXXX:Network"
        Calling-Station-Id = "001A73XXXXXX"
        NAS-Identifier = "APBuero"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 11Mbps 802.11b"
        NAS-IP-Address = 192.168.XX.XX
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
        Acct-Unique-Session-Id = "866e0c5655a05a0b"
        Timestamp = 1218652473
        Request-Authenticator = Verified

------------------------------------------------------------------------------------
But this second one from today fails with the error:

Tue Aug 19 18:11:30 2008 : Auth: Login OK: [test2 /<via Auth-Type = EAP>] (from client AP-Halle1 port 1 cli 001302BEXXXX) Tue Aug 19 18:12:30 2008 : Error: rlm_radutmp: Logout for NAS AP-Halle1 port 0, but no Login record

When looking into detail log I can also see, that the Session-Id and the port changed and I don't know why

Tue Aug 19 18:11:30 2008
        Service-Type = Framed-User
        Acct-Status-Type = Start
        User-Name = "test2"
        Framed-MTU = 1488
        Acct-Session-Id = "       6"
        Acct-Authentic = RADIUS
        Acct-Delay-Time = 0
        Called-Station-Id = "000000000000:Network"
        Calling-Station-Id = "001302BEXXXX"
        NAS-Identifier = "AP-Halle1"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 11Mbps 802.11b"
        NAS-IP-Address = 192.168.xx.xx
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
        Acct-Unique-Session-Id = "11f6ee9422434136"
        Timestamp = 1219162290
        Request-Authenticator = Verified

Tue Aug 19 18:12:30 2008
        Service-Type = Framed-User
        Acct-Status-Type = Stop
        User-Name = "test2"
        Framed-MTU = 1488
        Acct-Session-Id = "       6"
        Acct-Authentic = RADIUS
        Acct-Session-Time = 60
        Acct-Terminate-Cause = User-Request
        Acct-Delay-Time = 0
        Called-Station-Id = "000000000000:Network"
        Calling-Station-Id = "001302BEXXXX"
        NAS-Identifier = "AP-Halle1"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 11Mbps 802.11b"
        NAS-IP-Address = 192.168.xx.xx
        NAS-Port = 0
        NAS-Port-Id = "STA port # 0"
        Acct-Unique-Session-Id = "9c44efbf7672967b"
        Timestamp = 1219162350
        Request-Authenticator = Verified

---------------------------------------------------------------------------
Obviously the netgear access point uses port 1 on start but port 0 on stop.
Also the user is definitely NOT connected anymore but radwho shows the 
following:


# radwho -R
User-Name = "test2"
Acct-Session-Id = "       6"
NAS-IP-Address = 192.168.XX.XX
NAS-Port = 1
Service-type = Login-User
Framed-IP-Address =
Acct-Session-Time = 10255
Calling-Station-Id = "001302BEXXXX"

User-Name = "test2"
Acct-Session-Id = "      16"
NAS-IP-Address = 192.168.XX.XX
NAS-Port = 1
Service-type = Login-User
Framed-IP-Address =
Acct-Session-Time = 8170
Calling-Station-Id = "001302BEXXXX"

#

It's shows that the user is still connected...
Does anyone know how this is possible?

Best regards

Stefan Puch

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to