[c-nsp] Cisco/RADIUS PoD Disconnect Problem
Alexander Serkin
als at cell.ru
Mon Mar 5 10:24:15 EST 2007
There might be differences between your 12.3(11)YF and 12.3(14)YX images
we were using (it is PDSN, isn't it?). Try some combination of
User-Name, Framed-IP-Address, Acct-Session-Id, NAS-Identifier,
NAS-IP-Address and/or Calling-Station-Id in the PoD. This is from
Release Notes:
"The Disconnect Request contains the NAS-ID and the Username (NAI)
attributes. It can optionally contain 3GPP2 Correlation ID Calling
station ID (IMSI) and the Framed IP address—some session identification
attributes."
And more:
"CSCef18987—POD Debugs Display NACK Error Message For a Valid POD Request
A Cisco PDSN running R2.0 S/W incorrectly displays a NACK message being
sent even though it correctly sends an ACK message to RADIUS server in
response to a POD request.
This condition occurs when the POD feature is enabled, and the PDSN
receives a POD request from RADIUS server with only NAI and NAS-ID and
no session identification attributes in it. "
I'm not sure that i've tested PoD on YF images.
Mark Tinka wrote:
> On Monday 05 March 2007 13:16, Alexander Serkin wrote:
>
>> aaa server radius dynamic-author
>> client a.b.c.d
>> server-key 0 secret
>> auth-type any
>
> We have this configured the same way.
>
>> and the PoD:
>>
>> User-Name = <name at realm>
>> Calling-Station-Id = <CLID>
>
> If we include the "Calling-Station-Id" attribute it cannot locate
> the session. We are supplying the "User-Name" attribute in the PoD
> request.
>
> Our command set is:
>
> # radpwtst -user test -s n.n.n.n -secret xxxx -auth_port \
> 1645 -acct_port 1646 -nas_ip_address a.a.a.a -noauth -noacct \
> -trace 4 -code Disconnect-Request User-Name=test
>
> Mark.
>
>
--
Sincerely Yours,
Alexander
More information about the cisco-nsp
mailing list