[c-nsp] PPPoE and FreeRadius - yet again

William Jackson wjackson at sapphire.gi
Wed Oct 18 10:49:08 EDT 2006


Hi I'm stuck and need some guidance:

 

I have the following setup:

 

A router acting as a PPPoE server and authentication against a
freeradius box.

I have trolled the web and lists and this is where I am at now:

 

Router config:

*****************************************************************

aaa authentication ppp default group radius local

aaa authorization network default group radius none 

aaa accounting network default start-stop group radius

!

aaa nas port extended

aaa session-id common

!

ip host-routing

!         

vpdn enable

vpdn logging

!

!

bba-group pppoe global

 virtual-template 1

 sessions per-mac limit 2

!

!

interface Loopback0

 ip address 85.xxx.xxx.6 255.255.255.255

 

interface FastEthernet0

 description PPPoE Interface

 no ip address

 no ip unreachables

 duplex auto

 speed auto

 pppoe enable

!

interface FastEthernet1

 description normal connection

 ip address 85.xxx.xxx.75 255.255.255.192

 duplex auto

 speed auto

!

 

 

interface Virtual-Template1 

 mtu 1492

 no ip address

 ppp authentication pap

!         

ip radius source-interface Loopback0 

!

!

!

radius-server attribute nas-port format d

radius-server host 85.115.130.27 auth-port 1812 acct-port 1813 key 7
072C285F4D06

radius-server vsa send authentication

 

*****************************************************************

 

Freeradius user section:

 

pppoe   Auth-Type := Local, User-Password == "xxx", Huntgroup-Name ==
"pppoe"

        Service-Type = Framed-User,

        Framed-Protocol = PPP,

        Framed-IP-Address = 85.xxx.xxx.12,

        Framed-IP-Netmask = 255.255.255.255,

        Framed-Routing = Broadcast-Listen,

        Framed-Compression = Van-Jacobson-TCP-IP

 

*****************************************************************

 

Freeradius returned reply packet:

 

Packet-Type = Access-Accept

Wed Oct 18 16:26:26 2006

        Service-Type = Framed-User

        Framed-Protocol = PPP

        Framed-IP-Address = 85.xxx.xxx.12

        Framed-IP-Netmask = 255.255.255.255

        Framed-Routing = Broadcast-Listen

        Framed-Compression = Van-Jacobson-TCP-IP

 

*****************************************************************

 

Router debug output:

 

*Oct 18 14:36:49.918: PPPoE 0: I PADI  R:0001.4a07.3cd7 L:ffff.ffff.ffff
Fa0

*Oct 18 14:36:49.918:  Service tag: NULL Tag

*Oct 18 14:36:49.918: PPPoE 0: O PADO, R:0016.c789.fe42 L:0001.4a07.3cd7
Fa0

*Oct 18 14:36:49.918:  Service tag: NULL Tag

*Oct 18 14:36:49.918: PPPoE 0: I PADR  R:0001.4a07.3cd7 L:0016.c789.fe42
Fa0

*Oct 18 14:36:49.918:  Service tag: NULL Tag

*Oct 18 14:36:49.918: PPPoE : encap string prepared

*Oct 18 14:36:49.918: [74]PPPoE 74: Access IE handle allocated

*Oct 18 14:36:49.918: [74]PPPoE 74: pppoe SSS switch updated

*Oct 18 14:36:49.918: [74]PPPoE 74: AAA get retrieved attrs

*Oct 18 14:36:49.918: [74]PPPoE 74: AAA get nas port details

*Oct 18 14:36:49.922: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:49.922: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:49.922: [74]PPPoE 74: AAA unique ID allocated

*Oct 18 14:36:49.922: [74]PPPoE 74: AAA method list  set

*Oct 18 14:36:49.922: [74]PPPoE 74: Service request sent to SSS

*Oct 18 14:36:49.922: [74]PPPoE 74: Created, Service: None
R:0016.c789.fe42 L:0001.4a07.3cd7 Fa0

*Oct 18 14:36:49.922: [74]PPPoE 74: State NAS_PORT_POLICY_INQUIRY
Event MORE_KEYS

*Oct 18 14:36:49.922: [74]PPPoE 74: O PADS  R:0001.4a07.3cd7
L:0016.c789.fe42 Fa0

*Oct 18 14:36:49.922: [74]PPPoE 74: State PPP_START    Event DYN_BIND

*Oct 18 14:36:49.922: [74]PPPoE 74: data path set to PPP

*Oct 18 14:36:50.038: [74]PPPoE 74: State LCP_NEGOTIATION    Event
PPP_LOCAL

*Oct 18 14:36:50.038: PPPoE 74: Can not use sub-interface

*Oct 18 14:36:50.042: [74]PPPoE 74: State VACCESS_REQUESTED    Event
VA_RESP

*Oct 18 14:36:50.042: [74]PPPoE 74: Vi3 interface obtained

*Oct 18 14:36:50.042: [74]PPPoE 74: State PTA_BINDING    Event STAT_BIND

*Oct 18 14:36:50.042: [74]PPPoE 74: data path set to Virtual Acess

*Oct 18 14:36:50.042: [74]PPPoE 74: Connected PTA

*Oct 18 14:36:50.046: %LINK-3-UPDOWN: Interface Virtual-Access3, changed
state to up

*Oct 18 14:36:50.046: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:50.046: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:50.046: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:50.046: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:50.046: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:50.046: [74]PPPoE 74: AAA get dynamic attrs

*Oct 18 14:36:50.058: [74]PPPoE 74: State LOCALLY_TERMINATED    Event
PPP_DISCNCT

*Oct 18 14:36:50.058: [74]PPPoE 74: O PADT  R:0001.4a07.3cd7
L:0016.c789.fe42 Fa0

*Oct 18 14:36:50.058: [74]PPPoE 74: Destroying  R:0001.4a07.3cd7
L:0016.c789.fe42 Fa0

*Oct 18 14:36:50.058: PPPoE: Returning Vaccess Virtual-Access3

*Oct 18 14:36:50.058: [74]PPPoE 74: AAA account stopped

*Oct 18 14:36:50.058: PPPoE 74: I PADT  R:0001.4a07.3cd7
L:0016.c789.fe42 Fa0

*Oct 18 14:36:50.062: %LINK-3-UPDOWN: Interface Virtual-Access3, changed
state to down

 

 

*****************************************************************

 

It seems that the router isn't receiving the attributes?

 

I cannot seem to find a single decent guide on this, any ideas on where
to look next?

 

!

 



More information about the cisco-nsp mailing list