(RADIATOR) Problem of Radiator MAXT TNT
Muhammad Farooq Bhatti
farooq.bhatti at comsats.net.pk
Thu Aug 19 21:40:42 CDT 2004
Dear Hugh
The values for the Ascend-Disconnect-Cause is there in the dictionary which
I am using but in the log of radius I am getting its code rather its
description as you can see in the following stop packet.
So, you can see
Ascend-Disconnect-Cause = 45 is displayed instead of "pppRcvTerminate"
Code: Accounting-Request
Identifier: 134
Authentic: <141>E<143><20>C<177>4<135>e<239>[<168>P<231><132><216>
Attributes:
Event-Timestamp = 1092943943
User-Name = "xxxxxxx"
NAS-IP-Address = xxx.xxx.xxx.xxx
NAS-Identifier = "abc.def.ghi"
NAS-Port = 2
NAS-Port-Type = Async
Acct-Status-Type = Stop
Acct-Delay-Time = 0
Acct-Session-Id = "446474884"
Acct-Authentic = RADIUS
Acct-Session-Time = 1315
Acct-Input-Octets = 78789
Acct-Output-Octets = 267144
Acct-Input-Packets = 1370
Acct-Output-Packets = 1716
Ascend-Disconnect-Cause = 45
Ascend-Connect-Progress = 60
Ascend-Data-Rate = 28800
Ascend-PreSession-Time = 29
Ascend-Pre-Input-Octets = 312
Ascend-Pre-Output-Octets = 274
Ascend-Pre-Input-Packets = 12
Ascend-Pre-Output-Packets = 12
Ascend-First-Dest = 224.0.0.2
Ascend-Xmit-Rate = 33333
Ascend-Modem-PortNo = 13
Ascend-Modem-SlotNo = 6
Ascend-Modem-ShelfNo = 1
Calling-Station-Id = "0936812244"
Framed-Protocol = PPP
Framed-IP-Address = 203.215.191.194
Please help what should I do
Thanx
Farooq Bhatti
----- Original Message -----
From: "Hugh Irvine" <hugh at open.com.au>
To: "Muhammad Farooq Bhatti" <farooq.bhatti at comsats.net.pk>
Cc: <radiator at open.com.au>
Sent: Wednesday, August 18, 2004 2:37 AM
Subject: Re: (RADIATOR) Problem of Radiator MAXT TNT
>
> Hello Farooq -
>
> The values for Acct-Terminate-Cause are also listed in the dictionary.
>
> If there are additional values that are not listed in the dictionary,
> you can add them with your favourite text editor.
>
> You will need to check with your NAS vendor for the value definitions.
>
> regards
>
> Hugh
>
>
> On 19 Aug 2004, at 04:33, Muhammad Farooq Bhatti wrote:
>
> > Dear Hugh,
> >
> > You are right but you did not get my question. Actually I wana readable
> > disconnect reason in my radius log, which comes with the
> > Acct-Terminate-Cause not in Ascend-Disconnect-Cause. But in Max TNT it
> > only
> > show Ascend-Disconnect-Cause with digit code for its cause like 101.
> > So, its
> > difficult to make it understand.
> >
> > That's why I am asking is there any way by which I can relate
> > Ascend-Disconnect-Cause attribute to Acct-Terminate-Cause to get
> > readable
> > disconnect reasons in my radius log.
> >
> > Thanx and regards.
> >
> > Farooq Bhatti
> >
> >
> > ----- Original Message -----
> > From: "Hugh Irvine" <hugh at open.com.au>
> > To: "Muhammad Farooq Bhatti" <farooq.bhatti at comsats.net.pk>; "Dan
> > Cachola"
> > <dcachola at redback.com>
> > Cc: <radiator at open.com.au>
> > Sent: Tuesday, August 17, 2004 4:44 PM
> > Subject: Re: (RADIATOR) Problem of Radiator MAXT TNT
> >
> >
> >>
> >> Hello Farooq -
> >>
> >> The standard Radiator 3.9 dictionary contains this definition:
> >>
> >> VALUE Ascend-Disconnect-Cause sessFailSecurity
> >> 101
> >>
> >> what dictionary are you using?
> >>
> >> For your Radback question I have copied this mail to Dan Cachola at
> >> Redback (dcachola at redback.com).
> >>
> >> regards
> >>
> >> Hugh
> >>
> >>
> >> On 18 Aug 2004, at 10:22, Muhammad Farooq Bhatti wrote:
> >>
> >>> Dear Hugh
> >>>
> >>> My problem of multi-login is solved its due to MAX TNT shared-pro
> >>> setting in
> >>> ip-global profile.
> >>>
> >>> But I still need a favor for my second query in which I mentioned for
> >>> the
> >>> readable Disconnection Cause from Radiator dictionary Attribute.
> >>>
> >>> 1) That is How I can relate MAX TNT Disco cause Attribute which is
> >>> Ascend-Disconnect-Cause = 101
> >>> with Radius Attribute of Acct-Terminate-Cause to get a readable
> >>> reason of
> >>> user disconnection in the log.
> >>>
> >>> 2) Any one from the list have some experience configuring radiator in
> >>> Redback BRAS; please guide me I am able to get Access-Accept but not
> >>> been
> >>> able to connect. I am going to authenticate it from local system user
> >>> without accounting.
> >>>
> >>> Please see the log
> >>>
> >>> ####################### Log of radius
> >>>
> >>> Packet length = 97
> >>> 01 1f 00 61 8a 04 c0 a7 72 c0 9f 77 f2 54 90 e6
> >>> a9 e8 18 4d 01 09 66 62 68 61 74 74 69 02 12 78
> >>> 5b 18 d7 f8 7d 3a 86 78 97 32 7a 73 25 84 92 20
> >>> 09 52 65 64 62 61 63 6b 1a 0c 00 00 09 30 3e 06
> >>> 28 00 00 38 06 06 00 00 00 02 07 06 00 00 00 01
> >>> 05 06 e8 00 02 42 4d 05 75 62 72 08 06 d2 38 0c
> >>> 03
> >>> Code: Access-Request
> >>> Identifier: 31
> >>> Authentic:
> >>> <138><4><192><167>r<192><159>w<242>T<144><230><169><232><24>M
> >>> Attributes:
> >>> User-Name = "fbhatti"
> >>> User-Password = "x[<24><215><248>}:<134>x<151>2zs%<132><146>"
> >>> NAS-Identifier = "Redback"
> >>> RB-NAS-Real-Port = 671088696
> >>> Service-Type = Framed-User
> >>> Framed-Protocol = PPP
> >>> NAS-Port = 3892314690
> >>> Connect-Info = "ubr"
> >>> Framed-IP-Address = 210.56.12.3
> >>>
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Handling request with Handler
> >>> 'Realm=DEFAULT'
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Deleting session for fbhatti,
> >>> 210.56.14.9,
> >>> 3892314690
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Handling with Radius::AuthUNIX:
> >>> System
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Radius::AuthUNIX looks for match
> >>> with
> >>> fbhatti
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Radius::AuthUNIX ACCEPT:
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Access accepted for fbhatti
> >>> Mon Aug 16 18:45:29 2004: DEBUG: Packet dump:
> >>> *** Sending to 210.56.14.9 port 1812 ....
> >>>
> >>> Packet length = 46
> >>> 02 1f 00 2e e5 2b c1 a1 11 12 92 c9 2d 69 d5 2c
> >>> 47 01 33 45 1a 0d 00 00 09 30 04 07 6c 6f 63 61
> >>> 6c 1a 0d 00 00 09 30 31 07 6c 6f 63 61 6c
> >>> Code: Access-Accept
> >>> Identifier: 31
> >>> Authentic:
> >>> <138><4><192><167>r<192><159>w<242>T<144><230><169><232><24>M
> >>> Attributes:
> >>> RB-Context-Name = "local"
> >>> RB-Bind-Int-Context = "local"
> >>>
> >>> Mon Aug 16 18:45:39 2004: DEBUG: Packet dump:
> >>> *** Received from 210.56.14.9 port 1812 ....
> >>>
> >>> ###################### End of log
> >>>
> >>>
> >>> Muhammad Farooq Bhatti
> >>> Assistant Director (Systems)
> >>> First Floor, COMSATS Headquarters,
> >>> Shahra-e-Jamhuriyat, G-5/2, Islamabad
> >>> Ph. +92-51-9208063-5 Ext. 124
> >>> Fax. +92-51-9212411
> >>> farooq.bhatti at comsats.net.pk
> >>> www.comsats.net.pk
> >>>
> >>>
> >>>
> >>>
> >>> ----- Original Message -----
> >>> From: "Muhammad Farooq Bhatti" <farooq.bhatti at comsats.net.pk>
> >>> To: "Hugh Irvine" <hugh at open.com.au>
> >>> Cc: <radiator at open.com.au>
> >>> Sent: Friday, August 13, 2004 12:20 PM
> >>> Subject: Re: (RADIATOR) Problem of Radiator MAXT TNT
> >>>
> >>>
> >>>> Dear hugh
> >>>>
> >>>> Thanx for the clue of using authplsql.pm I will try it later but
> >>>> even
> >>> after
> >>>> removing one of
> >>>> <SessionDatabase SQL> its log is same as mentioned. If you could
> >>>> guide me
> >>>> why
> >>>> Ascend-Disconnect-Cause = 101
> >>>> Ascend-Connect-Progress = 67
> >>>>
> >>>> is comming in Access-request stop packet. of "comsats" user
> >>>> connection on
> >>>> MAX TNT for multi-login.
> >>>>
> >>>> where as ascend itself explain that
> >>>> Disconect-cause=101 is for The session failed for security reasons,
> >>>> such
> >>> as
> >>>> an invalid incoming user.
> >>>> Connect-Progress = 67 is for IPNCP is in the Open state.
> >>>>
> >>>> One more favour if u can guide is how can I make "disconnect cause
> >>>> code"
> >>> to
> >>>> readable in MAX like in cisco we get propper
> >>>> Acct-Terminat-casue.
> >>>> e.g. in ciscoAs5300,
> >>>> Acct-Terminate-Cause = User-Request
> >>>>
> >>>> Thanx and regards.
> >>>>
> >>>> Farooq Bhatti.
> >>>
> >>>
> >>
> >> NB: have you included a copy of your configuration file (no secrets),
> >> together with a trace 4 debug showing what is happening?
> >>
> >> --
> >> Radiator: the most portable, flexible and configurable RADIUS server
> >> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
> >> -
> >> Nets: internetwork inventory and management - graphical, extensible,
> >> flexible with hardware, software, platform and database independence.
> >> -
> >> CATool: Private Certificate Authority for Unix and Unix-like systems.
> >>
> >> --
> >> Archive at http://www.open.com.au/archives/radiator/
> >> Announcements on radiator-announce at open.com.au
> >> To unsubscribe, email 'majordomo at open.com.au' with
> >> 'unsubscribe radiator' in the body of the message.
> >>
> >
> >
>
> NB: have you included a copy of your configuration file (no secrets),
> together with a trace 4 debug showing what is happening?
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
> -
> CATool: Private Certificate Authority for Unix and Unix-like systems.
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list