[cisco-nas] PPPoE radius attributes

Tony td_miles at yahoo.com
Tue Nov 11 03:02:53 EST 2008


Try adding "virtual-profile aaa" to global config.

"debug vtemplate" will show you what is happening.

HTH.

regards,
Tony.



--- On Mon, 10/11/08, Edgars Makna <edgarz at dtg.lv> wrote:

> From: Edgars Makna <edgarz at dtg.lv>
> Subject: [cisco-nas] PPPoE radius attributes
> To: cisco-nas at puck.nether.net
> Date: Monday, 10 November, 2008, 3:44 AM
> Hello!
> 
> I'm running pppoe server on cisco 2801, everything
> works except one thing. Cisco do not apply received
> parameters from radius server.
> 
> 
> cisco debug:
> .Nov  9 13:58:04.271: PPPoE 0: I PADI  R:0019.d133.551e
> L:ffff.ffff.ffff 33 Fa0/1.33
> .Nov  9 13:58:04.271:  Service tag: NULL Tag
> .Nov  9 13:58:04.271: PPPoE 0: O PADO, R:001a.e23e.6bdd
> L:0019.d133.551e 33 Fa0/1.33
> .Nov  9 13:58:04.271:  Service tag: NULL Tag
> .Nov  9 13:58:04.271: PPPoE 0: I PADR  R:0019.d133.551e
> L:001a.e23e.6bdd 33 Fa0/1.33
> .Nov  9 13:58:04.271:  Service tag: NULL Tag
> .Nov  9 13:58:04.271: PPPoE : encap string prepared
> .Nov  9 13:58:04.271: [365]PPPoE 364: Access IE handle
> allocated
> .Nov  9 13:58:04.275: [365]PPPoE 364: pppoe SSS switch
> updated
> .Nov  9 13:58:04.275: [365]PPPoE 364: AAA get retrieved
> attrs
> .Nov  9 13:58:04.275: [365]PPPoE 364: AAA get nas port
> details
> .Nov  9 13:58:04.275: [365]PPPoE 364: AAA get dynamic attrs
> .Nov  9 13:58:04.275: [365]PPPoE 364: AAA get dynamic attrs
> .Nov  9 13:58:04.275: [365]PPPoE 364: AAA unique ID
> allocated
> .Nov  9 13:58:04.275: [365]PPPoE 364: AAA method list  set
> .Nov  9 13:58:04.275: [365]PPPoE 364: Service request sent
> to SSS
> .Nov  9 13:58:04.279: [365]PPPoE 364: Created, Service:
> None R:001a.e23e.6bdd L:0019.d133.551e 33 Fa0/1.33
> .Nov  9 13:58:04.279: [365]PPPoE 364: State
> NAS_PORT_POLICY_INQUIRY Event SSS_LOCAL
> .Nov  9 13:58:04.279: [365]PPPoE 364: O PADS 
> R:0019.d133.551e L:001a.e23e.6bdd Fa0/1.33
> panorama_plaza-gw#
> .Nov  9 13:58:04.283: [365]PPPoE 364: State PPP_START   
> Event DYN_BIND
> .Nov  9 13:58:04.283: [365]PPPoE 364: data path set to PPP
> .Nov  9 13:58:04.363: RADIUS/ENCODE(0000091A):Orig.
> component type = PPoE
> .Nov  9 13:58:04.363: RADIUS:  AAA Unsupported Attr:
> client-mac-address[48]  14
> .Nov  9 13:58:04.367: RADIUS:   30 30 31 39 2E 64 31 33 33
> 2E 35 35          [0019.d133.55]
> .Nov  9 13:58:04.367: RADIUS:  AAA Unsupported Attr:
> interface [174] 8
> .Nov  9 13:58:04.367: RADIUS:   30 2F 30 2F 31 2F         
> [0/0/1/]
> .Nov  9 13:58:04.367: RADIUS(0000091A): Config NAS IP:
> 0.0.0.0
> .Nov  9 13:58:04.367: RADIUS/ENCODE: No idb found! Framed
> IP Addr might not be included
> .Nov  9 13:58:04.367: RADIUS/ENCODE(0000091A):
> acct_session_id: 2458
> .Nov  9 13:58:04.367: RADIUS(0000091A): sending
> .Nov  9 13:58:04.367: RADIUS/ENCODE: Best Local IP-Address
> CISCO_IP_ADDRESS for Radius-Server 91.135.16.2
> .Nov  9 13:58:04.367: RADIUS(0000091A): Send Access-Request
> to 91.135.16.2:1812 id 1645/109, len 91
> .Nov  9 13:58:04.371: RADIUS:  authenticator F6 28 6C 9E 4A
> 7D EF 19 - AF F3 F8 4E 08 C8 A2 30
> .Nov  9 13:58:04.371: RADIUS:  Framed-Protocol     [7]   6 
>  PPP                [1]
> .Nov  9 13:58:04.371: RADIUS:  User-Name           [1]   13
>  "servertelpa"
> .Nov  9 13:58:04.371: RADIUS:  User-Password       [2]   18
>  *
> .Nov  9 13:58:04.371: RADIUS:  NAS-Port-Type       [61]  6 
>  Virtual                [5]
> .Nov  9 13:58:04.371: RADIUS:  NAS-Port            [5]   6 
>  0
> .Nov  9 13:58:04.371: RADIUS:  NAS-Port-Id         [87]  10
>  "0/0/1/33"
> .Nov  9 13:58:04.371: RADIUS:  Service-Type        [6]   6 
>  Framed                [2]
> .Nov  9 13:58:04.371: RADIUS:  NAS-IP-Address      [4]   6
> CISCO_IP_ADDRESS
> .Nov  9 13:58:04.387: RADIUS: Received from id 1645/109
> 91.135.16.2:1812, Access-Accept, len 276
> .Nov  9 13:58:04.391: RADIUS:  authenticator 59 9D 99 31 43
> EE FB 9E - 2D F1 1E 21 78 FF 31 79
> .Nov  9 13:58:04.391: RADIUS:  Framed-Protocol     [7]   6 
>  PPP                [1]
> .Nov  9 13:58:04.391: RADIUS:  Framed-Compression  [13]  6 
>  VJ TCP/IP Header Compressi[1]
> .Nov  9 13:58:04.391: RADIUS:  Framed-IP-Address   [8]   6 
>  XXX.YYY.27.253
> .Nov  9 13:58:04.391: RADIUS:  Framed-IP-Netmask   [9]   6 
>  255.255.255.255
> .Nov  9 13:58:04.391: RADIUS:  Service-Type        [6]   6 
>  Framed                [2]
> .Nov  9 13:58:04.391: RADIUS:  Vendor, Cisco       [26] 
> 113
> .Nov  9 13:58:04.391: RADIUS:   Cisco AVpair       [1]  
> 107 "lcp:interface-config#1=rate-limit intput 10240000
> 10000 10000 conform-action continue exceed-action drop
> "
> .Nov  9 13:58:04.391: RADIUS:  Vendor, Cisco       [26] 
> 113
> .Nov  9 13:58:04.391: RADIUS:   Cisco AVpair       [1]  
> 107 "lcp:interface-config#2=rate-limit output 10240000
> 10000 10000 conform-action continue exceed-action drop
> "
> .Nov  9 13:58:04.395: RADIUS(0000091A): Received from id
> 1645/109
> .Nov  9 13:58:04.399: [365]PPPoE 364: State LCP_NEGOTIATION
>    Event PPP_LOCAL
> .Nov  9 13:58:04.399: PPPoE 364: Can not use sub-interface
> .Nov  9 13:58:04.403: [365]PPPoE 364: State
> VACCESS_REQUESTED    Event VA_RESP
> .Nov  9 13:58:04.403: [365]PPPoE 364: Vi81 interface
> obtained
> .Nov  9 13:58:04.403: [365]PPPoE 364: State PTA_BINDING   
> Event STAT_BIND
> .Nov  9 13:58:04.403: [365]PPPoE 364: data path set to
> Virtual Acess
> .Nov  9 13:58:04.403: [365]PPPoE 364: Connected PTA
> .Nov  9 13:58:04.407: %LINK-3-UPDOWN: Interface
> Virtual-Access81, changed state to up
> panorama_plaza-gw#
> .Nov  9 13:58:04.407: [365]PPPoE 364: AAA get dynamic attrs
> .Nov  9 13:58:04.407: [365]PPPoE 364: AAA get dynamic attrs
> .Nov  9 13:58:04.459: RADIUS/ENCODE(0000091A):Orig.
> component type = PPoE
> .Nov  9 13:58:04.459: RADIUS(0000091A): Config NAS IP:
> 0.0.0.0
> .Nov  9 13:58:04.463: RADIUS/ENCODE: Best Local IP-Address
> CISCO_IP_ADDRESS for Radius-Server RADIUS_SERVER_IP
> .Nov  9 13:58:04.467: RADIUS: Received from id 1646/149
> 91.135.16.2:1813, Accounting-response, len 20
> .Nov  9 13:58:05.407: %LINEPROTO-5-UPDOWN: Line protocol on
> Interface Virtual-Access81, changed state to up
> 
> GW#sh user | i servertelpa
>   Vi81         servertelpa        PPPoE        00:04:39
> XXX.YYY.27.9
> GW#
> As we see ip address is a bit different than i send from
> RADIUS.
> 
> GW#sh interfaces rate-limit
> 
> GW#
> And no rate limits applied.
> 
> 
> CONFIG here:
> aaa authentication login default local line
> aaa authentication ppp default group radius
> aaa authorization console
> aaa authorization exec default local
> aaa accounting delay-start
> aaa accounting update periodic 180
> aaa accounting network default start-stop group radius
> !
> aaa server radius dynamic-author
>  server-key cool-password
> !
> aaa session-id common
> 
> bba-group pppoe plaza
>  virtual-template 1
>  sessions per-mac limit 1
> 
> interface FastEthernet0/1.33
>  encapsulation dot1Q 33
>  pppoe enable group plaza
>  pppoe max-sessions 200
> 
> interface Virtual-Template1
>  ip unnumbered Loopback1
>  peer default ip address pool plaza
>  ppp authentication pap
> 
> ip local pool plaza 91.135.27.4 91.135.27.245
> VERSION: Cisco IOS Software, 2801 Software
> (C2801-SPSERVICESK9-M), Version 12.4(15)T3, RELEASE SOFTWARE
> (fc1)
> 
> Where to dig?
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> cisco-nas mailing list
> cisco-nas at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas


      



More information about the cisco-nas mailing list