Hugh
We have had some confusion regarding issuing dynamic ip's when using
AuthbyRADIUS in a proxy situation. We understand that once an
AuthbyRADIUS clause is processed, it returns immediatly to the nas
without waiting for a reply from the proxy server. In order to issue a
dynamic ip in this situation, either Synchronous mode or a ReplyHook
must be used according to the manual. Synchronous mode can severely
impact performance, even when specifying Fork. Our setup includes well
over a 100 handlers which are used based on called-station-id and/or
realm. We setup our handlers to use a ReplyHook instead of Synchronous
mode to assign a dynamic ip back to the nas. However, when using a
ReplyHook, an ip never gets sent back to the nas successfully. The
attached debug file (replyhook_example.log) shows that as soon as
AuthbyRADIUS sends the Access-Request to the proxy server, an
Access-Accept is sent back to our nas containing no attributes, even
with the ReplyHook. The nas then authenticates the user but assigns
them an IP of 0.0.0.0 and kicks him a few seconds later. As soon as the
proxy server responds, another response is sent to the nas with the
correct attributes, including the IP taken from our SQLAllocator, but is
dismissed by the nas because it already received a repsonse regarding
that session.
Isn't the ReplyHook supposed to allow a dynamic IP to be sent back to
the nas even though the AuthbyRADIUS clause returns immediately? How is
it supposed to work?
We then enabled Synchronous mode and everything worked fine. Radiator
waited for a response from the proxy server before sending a dynamic IP
with the reply back to the nas as shown in the attached debug file
(sync_example.log). However, using a ReplyHook is supposed to
circumvent the need to use Synchronous mode and still maintain the
ability to assign dynamic ip's.
Also attached is our radius.cfg. Are we implementing the ReplyHook
(AllocateIPAddressOnReplyFromProxy taken from goodies/hooks.txt)
incorrectly? Can our needs be met without using Synchronous/Fork mode?
Thanks
Matt
Foreground
#LogStdout
LogDir /var/log/radius
LogFile /var/log/radius/%Y%m%d-radius.log
AuthPort 1812
AcctPort 1813
# User a lower trace level in production systems:
Trace 5
# You will probably want to add other Clients to suit your site,
# one for each NAS you want to work with
<ClientListSQL>
DBSource dbi:mysql:radius
DBUsername xxxxxxxxxxxx
DBAuth xxxxxxxxxxxx
GetClientQuery select NASIDENTIFIER, SECRET from RADCLIENTLIST
</ClientListSQL>
# Setup the address allocator
<AddressAllocator SQL>
Identifier SQLAllocator
DBSource dbi:mysql:radius
DBUsername xxxxxxxxxxxx
DBAuth xxxxxxxxxxxx
DefaultLeasePeriod 604800
FindQuery select TIME_STAMP, YIADDR from RADPOOL where POOL='%0' and STATE=0
order by TIME_STAMP limit 1
#include /usr/local/radiator/configs/ippools.cfg
<AddressPool GLOBAL>
Range xxxxxxx xxxxxxxxx
</AddressPool>
</AddressAllocator>
<AuthBy SQL>
Identifier CheckBlacklist
DBSource dbi:mysql:radius
DBUsername xxxxxxxxx
DBAuth xxxxxxxxx
AuthSelect select ATTRIBUTE from BLACKLIST \
where VALUE = '%{Calling-Station-Id}'
AuthColumnDef 0, GENERIC, check
NoDefaultIfFound
AccountingTable
</AuthBy>
# dynamic address allocation tables
#include /usr/local/radiator/configs/dynaddress.cfg
<AuthBy DYNADDRESS>
Identifier AllocateIPAddressGLOBAL
Allocator SQLAllocator
PoolHint GLOBAL
</AuthBy>
# Get configs from specified directory
#include /usr/local/radiator/configs/dnislist.cfg
<Handler Called-Station-Id = /1155$/>
AuthByPolicy ContinueWhileAccept
Identifier AllocateIPAddressGLOBAL
#
# FORWARD AUTHENTICATION INFORMATION
#
<AuthBy RADIUS>
Identifier CheckRemoteRadius
#NoForwardAuthentication
NoForwardAccounting
Synchronous
<Host xx.xx.xx.xx>
Secret xxxxxxx
AuthPort 11155
Retries 3
RetryTimeout 10
</Host>
ReplyHook
file:"/usr/local/radiator/hooks/AllocateIPAddressOnReplyFromProxy"
# FILTER NAME: STATIC-ALLOW
AllowInReply
Framed-IP-Address,Session-Timeout,Ascend-Data-Filter,Idle-Timeout,Ascend-Idle-Limit,Ascend-Maximum-Call-Duration
AddToReply Framed-Netmask=255.255.255.255
</AuthBy>
#
# FORWARD ACCOUNTING INFORMATION TO NECESSARY RADIUS SERVERS
#
<AuthBy RADIUS>
NoForwardAuthentication
# NoForwardAccounting
<Host xx.xx.xx.xx>
Secret xxxxxxxx
AcctPort 11156
Retries 3
RetryTimeout 10
</Host>
</AuthBy>
</Handler>
*** Received from xxxxNASxxxx port 6981 ....
Packet length = 119
01 2c 00 77 fc df 11 10 85 cd 10 28 7d ad 13 20
0b 7d 08 75 01 0a 64 6f 6c 6c 33 36 35 00 02 09
ff 8e 44 f9 d7 cd 85 04 06 42 51 07 07 05 06 00
00 58 57 3d 06 00 00 00 00 06 06 00 00 00 02 07
06 00 00 00 01 18 02 1f 0c 39 31 36 34 34 33 34
34 38 39 1e 0c 39 31 36 32 33 39 31 31 36 30 2c
0c 33 34 38 32 34 31 37 33 30 00 c5 06 00 00 54
60 ff 06 00 00 c0 b5
Code: Access-Request
Identifier: 44
Authentic: <252><223><17><16><133><205><16>(}<173><19> <11>}<8>u
Attributes:
User-Name = "doll365"
User-Password = "<255><142>D<249><215><205><133>"
NAS-IP-Address = xxxxxxxxx
NAS-Port = 22615
NAS-Port-Type = Async
Service-Type = Framed-User
Framed-Protocol = PPP
State = ""
Calling-Station-Id = "xxxxxxxxx"
Called-Station-Id = "xxxxxx1160"
Acct-Session-Id = "348241730"
Ascend-Data-Rate = 21600
Ascend-Xmit-Rate = 49333
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1000$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1050$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1055$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1060$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1065$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1070$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1075$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1080$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1085$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1090$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1100$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1105$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1110$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1115$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1120$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1125$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1130$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1135$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1140$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1145$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1150$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1155$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Check if Handler Called-Station-Id = /1160$/ should be used to handle this request
Fri Jan 4 11:37:29 2002: DEBUG: Handling request with Handler 'Called-Station-Id = /1160$/'
Fri Jan 4 11:37:29 2002: DEBUG: Deleting session for doll365, xxxxNASxxxx, 22615
Fri Jan 4 11:37:29 2002: DEBUG: Handling with Radius::AuthRADIUS
Fri Jan 4 11:37:29 2002: DEBUG: Packet dump:
*** Sending to xxxxPROXY RADxxxx port 11160 ....
Packet length = 126
01 01 00 7e fc df 11 10 85 cd 10 28 7d ad 13 20
0b 7d 08 75 01 09 64 6f 6c 6c 33 36 35 02 12 80
65 8d c1 38 9f 58 b5 b2 e4 ee e3 2f a3 11 56 04
06 42 51 07 07 05 06 00 00 58 57 3d 06 00 00 00
00 06 06 00 00 00 02 07 06 00 00 00 01 18 02 1f
0c 39 31 36 34 34 33 34 34 38 39 1e 0c 39 31 36
32 33 39 31 31 36 30 2c 0b 33 34 38 32 34 31 37
33 30 c5 06 00 00 54 60 ff 06 00 00 c0 b5
Code: Access-Request
Identifier: 1
Authentic: <252><223><17><16><133><205><16>(}<173><19> <11>}<8>u
Attributes:
User-Name = "doll365"
User-Password = "<128>e<141><193>8<159>X<181><178><228><238><227>/<163><17>V"
NAS-IP-Address = xxxxxxxx
NAS-Port = 22615
NAS-Port-Type = Async
Service-Type = Framed-User
Framed-Protocol = PPP
State = ""
Calling-Station-Id = "xxxxxxxxxx"
Called-Station-Id = "xxxxxx1160"
Acct-Session-Id = "348241730"
Ascend-Data-Rate = 21600
Ascend-Xmit-Rate = 49333
Fri Jan 4 11:37:29 2002: DEBUG: Handling with Radius::AuthRADIUS
Fri Jan 4 11:37:29 2002: DEBUG: Access accepted for doll365
Fri Jan 4 11:37:29 2002: DEBUG: Packet dump:
*** Sending to xxxxNASxxxx port 6981 ....
Packet length = 20
02 2c 00 14 4f 17 20 d3 16 2d fe 21 ff b6 be 8f
bc 12 1c 65
Code: Access-Accept
Identifier: 44
Authentic: <252><223><17><16><133><205><16>(}<173><19> <11>}<8>u
Attributes:
Fri Jan 4 11:37:29 2002: DEBUG: Packet dump:
*** Received from xxxxPROXY RADxxxx port 11160 ....
Packet length = 20
02 01 00 14 da 9d ef 34 d6 fa 93 89 86 36 64 12
d9 4a ed 0b
Code: Access-Accept
Identifier: 1
Authentic: <218><157><239>4<214><250><147><137><134>6d<18><217>J<237><11>
Attributes:
Fri Jan 4 11:37:29 2002: DEBUG: Received reply in AuthRADIUS for req 1 from xxxxPROXY RADxxxx:11160
Fri Jan 4 11:37:29 2002: DEBUG: Using Identifier AllocateIPAddressGLOBAL
Fri Jan 4 11:37:29 2002: DEBUG: Found AuthBy with Identifier AllocateIPAddressGLOBAL
Fri Jan 4 11:37:29 2002: DEBUG: Handling with Radius::AuthDYNADDRESS
Fri Jan 4 11:37:29 2002: DEBUG: Query is: select TIME_STAMP, YIADDR, SUBNETMASK, DNSSERVER from RADPOOL
where POOL='GLOBAL' and STATE=0 order by TIME_STAMP
Fri Jan 4 11:37:29 2002: DEBUG: do query is: update RADPOOL set STATE=1,
TIME_STAMP=1010173049,
EXPIRY=1010777849, USERNAME='doll365' where YIADDR='xxxxxxxxx' and TIME_STAMP =1010102690
Fri Jan 4 11:37:29 2002: DEBUG: Access accepted for doll365
Fri Jan 4 11:37:29 2002: DEBUG: Packet dump:
*** Sending to xxxxNASxxxx port 6981 ....
Packet length = 44
02 2c 00 2c 1a 1a 8e 55 f6 4d b2 d9 b7 60 c0 46
e4 89 5b 2c 06 06 00 00 00 02 07 06 00 00 00 01
09 06 ff ff ff ff 08 06 42 51 54 34
Code: Access-Accept
Identifier: 44
Authentic: <252><223><17><16><133><205><16>(}<173><19> <11>}<8>u
Attributes:
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Netmask = 255.255.255.255
Framed-IP-Address = xxxxxxxxxx
Fri Jan 4 11:37:32 2002: DEBUG: Timed out, retransmitting
#####Timed out because this session was already received by nas as shown above
*** Received from xxxNASxxxxx port 7006 ....
Packet length = 116
01 85 00 74 ff 3b 51 ff 1d 6e 62 98 37 b3 90 26
65 10 ab 1b 01 07 73 64 61 30 00 02 09 bd 85 5a
34 2c 70 8e 04 06 42 51 07 07 05 06 00 00 52 1c
3d 06 00 00 00 00 06 06 00 00 00 02 07 06 00 00
00 01 18 02 1f 0c 35 33 30 37 39 32 38 39 39 37
1e 0c 35 33 30 32 30 34 31 39 31 35 2c 0c 33 34
38 32 34 37 31 39 38 00 c5 06 00 00 67 20 ff 06
00 00 b1 15
Code: Access-Request
Identifier: 133
Authentic: <255>;Q<255><29>nb<152>7<179><144>&e<16><171><27>
Attributes:
User-Name = "sda0"
User-Password = "<189><133>Z4,p<142>"
NAS-IP-Address = xxxxxxxxx
NAS-Port = 21020
NAS-Port-Type = Async
Service-Type = Framed-User
Framed-Protocol = PPP
State = ""
Calling-Station-Id = "xxxxxxxxxx"
Called-Station-Id = "xxxxxx1915"
Acct-Session-Id = "348247198"
Ascend-Data-Rate = 26400
Ascend-Xmit-Rate = 45333
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1000$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1050$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1055$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1060$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1065$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1070$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1075$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1080$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1085$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1090$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1100$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1105$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1110$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1115$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1120$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1125$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1130$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1135$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1140$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1145$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1150$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1155$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1160$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1165$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1170$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1175$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1180$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1185$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1190$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1195$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1200$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1205$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1210$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1215$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1220$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1225$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1230$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1235$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1240$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1245$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1250$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1260$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1265$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1270$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1275$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1280$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1285$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1290$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1295$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1300$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1305$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1310$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1315$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1320$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1325$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1330$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1335$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1340$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1345$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1350$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1355$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1360$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1365$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1370$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1375$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1380$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1385$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1390$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1395$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1400$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1425$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1480$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1500$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1515$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1525$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1530$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1535$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1540$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1545$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1550$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1560$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1565$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1575$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1580$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1585$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1590$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1595$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1600$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1610$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1615$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1620$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1625$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1635$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1640$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1645$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1650$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1655$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1660$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1670$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1675$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1680$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1685$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1690$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1695$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1700$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1800$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1805$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1810$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1815$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1825$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1840$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1845$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1850$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1855$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1865$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1875$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1880$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1885$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1890$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1895$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1910$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Check if Handler Called-Station-Id = /1915$/ should be used to handle this request
Mon Jan 7 11:39:56 2002: DEBUG: Handling request with Handler 'Called-Station-Id = /1915$/'
Mon Jan 7 11:39:56 2002: DEBUG: Deleting session for sda0, xxxxNASxxxx, 21020
Mon Jan 7 11:39:56 2002: DEBUG: Handling with Radius::AuthRADIUS
Mon Jan 7 11:39:56 2002: DEBUG: Packet dump:
*** Sending to xxxxPROXY RADxxxx port 11915 ....
Packet length = 123
01 01 00 7b ff 3b 51 ff 1d 6e 62 98 37 b3 90 26
65 10 ab 1b 01 06 73 64 61 30 02 12 eb 02 72 76
ee db be 92 26 50 9c 34 ce af bb ae 04 06 42 51
07 07 05 06 00 00 52 1c 3d 06 00 00 00 00 06 06
00 00 00 02 07 06 00 00 00 01 18 02 1f 0c 35 33
30 37 39 32 38 39 39 37 1e 0c 35 33 30 32 30 34
31 39 31 35 2c 0b 33 34 38 32 34 37 31 39 38 c5
06 00 00 67 20 ff 06 00 00 b1 15
Code: Access-Request
Identifier: 1
Authentic: <255>;Q<255><29>nb<152>7<179><144>&e<16><171><27>
Attributes:
User-Name = "sda0"
User-Password = "<235><2>rv<238><219><190><146>&P<156>4<206><175><187><174>"
NAS-IP-Address = xxxxxxxxx
NAS-Port = 21020
NAS-Port-Type = Async
Service-Type = Framed-User
Framed-Protocol = PPP
State = ""
Calling-Station-Id = "xxxxxxxx"
Called-Station-Id = "xxxxx1915"
Acct-Session-Id = "348247198"
Ascend-Data-Rate = 26400
Ascend-Xmit-Rate = 45333
Mon Jan 7 11:39:56 2002: DEBUG: Packet dump:
*** Received from xxxxPROXY RADxxxx port 11915 ....
Packet length = 20
02 01 00 14 fd 82 4b 12 7a 64 b0 ed 07 68 e6 fa
af 8c bb 31
Code: Access-Accept
Identifier: 1
Authentic: <253><130>K<18>zd<176><237><7>h<230><250><175><140><187>1
Attributes:
Mon Jan 7 11:39:56 2002: DEBUG: Received reply in AuthRADIUS for req 1 from xxxxPROXY RADxxxx:11915
Mon Jan 7 11:39:56 2002: DEBUG: Using Identifier AllocateIPAddressGLOBAL
Mon Jan 7 11:39:56 2002: DEBUG: Found AuthBy with Identifier AllocateIPAddressGLOBAL
Mon Jan 7 11:39:56 2002: DEBUG: Handling with Radius::AuthDYNADDRESS
Mon Jan 7 11:39:56 2002: DEBUG: Query is: select TIME_STAMP, YIADDR from RADPOOL where POOL='GLOBAL' and STATE=0 order by TIME_STAMP limit 1
Mon Jan 7 11:39:56 2002: DEBUG: do query is: update RADPOOL set STATE=1,
TIME_STAMP=1010432396,
EXPIRY=1011037196, USERNAME='sda0' where YIADDR='xxxxxxxx' and TIME_STAMP =1010102690
Mon Jan 7 11:39:56 2002: DEBUG: Handling with Radius::AuthRADIUS
Mon Jan 7 11:39:56 2002: DEBUG: Access accepted for sda0
Mon Jan 7 11:39:56 2002: DEBUG: Packet dump:
*** Sending to xxxxNASxxxx port 7006 ....
Packet length = 32
02 85 00 20 92 3d 68 0c e0 ae 5a 89 02 34 f6 0b
8f 8b 1b 90 09 06 ff ff ff ff 08 06 42 51 54 46
Code: Access-Accept
Identifier: 133
Authentic: <255>;Q<255><29>nb<152>7<179><144>&e<16><171><27>
Attributes:
Framed-Netmask = 255.255.255.255
Framed-IP-Address = xxxxxxxxxx
Mon Jan 7 11:39:56 2002: DEBUG: Packet dump:
