[c-nsp] asr920 - pppoe - Filter-Id is fail

[James Bensley]

On Fri, 18 Sep 2020 at 20:29, Mike <mike+lists at yourtownonline.com> wrote:
>
> Hi,
>
>     I got another one -
>
>     Playing with my asr920 I have it working as a pppoe server. I notice
> that if I have a radius attribute returned "Filter-Id" with the name of
> a filter already on the box, the pppoe session doesn't come up and
> throws an error:
>
> Sep 18 12:11:13.636 PDT: RADIUS: Received from id 1645/45
> 100.127.248.10:1812, Access-Accept, len 119
> Sep 18 12:11:13.637 PDT: RADIUS:  authenticator FC CA B3 DE 64 4C C6 81
> - 1E B3 E3 2F 6F 91 E0 78
> Sep 18 12:11:13.637 PDT: RADIUS:  Framed-Protocol     [7]   6
> PPP                       [1]
> Sep 18 12:11:13.637 PDT: RADIUS:  Framed-Compression  [13]  6   VJ
> TCP/IP Header Compressi[1]
> Sep 18 12:11:13.637 PDT: RADIUS:  Framed-IP-Address   [8]   6
> 100.127.248.222
> Sep 18 12:11:13.637 PDT: RADIUS:  Vendor, Cisco       [26]  58
> Sep 18 12:11:13.637 PDT: RADIUS:   ssg-service-info   [251] 52
> "QU;4500000;843750;1687500;D;4500000;843750;1687500"
> Sep 18 12:11:13.637 PDT: RADIUS:  Filter-Id           [11]  23
> Sep 18 12:11:13.637 PDT: RADIUS:   63 75 73 74 6F 6D 65 72 5F 69 6E 62
> 6F 75 6E 64  [customer_inbound]
> Sep 18 12:11:13.637 PDT: RADIUS:   31 2E 6F 75 74             [ 1.out]
> Sep 18 12:11:13.637 PDT: RADIUS(0000003F): Received from id 1645/45
> Sep 18 12:11:13.638 PDT: %SGPM-3-POLICY_RULE_SERVICE_CONFIG_ERROR:
> Service () is configured incorrectly, service_failed event will be thrown

Hi Mike,

Can you try removing this?

Sep 18 12:11:13.637 PDT: RADIUS:  Framed-Compression  [13]  6   VJ
TCP/IP Header Compressi[1]

It has no impact and for ASR1Ks it's not supported (so I assume it
isn't supported on ASR920s either). I've had an issue in the past with
ASR1Ks where that was stopping subscriber sessions from establishing,
in combination with another AVP but without that 2nd AVP the session
would establish even though compression isn't supported. It was only
in that combination that the issue was highlighted. If you're using
something like FreeRADIUS it's in there by default, so you need to
look to remove it from the default config.

Cheers,
Janes.