disconected after one second

Łukasz Kopiszka lukasz at alfa-system.pl
Thu Apr 4 17:57:51 CEST 2013


Moore debug "show log fac aaa":

Apr 4 17:43:26: %AAA-7-RADIUS: rad_mgr, Process radius requests in db 
request queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: rad_process_aaad_req: Receive request (Authentication)
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_ATTR: 
aaa_idx 50000358: rad_add_attr_to_tlv_list, Add attr NAS_Port_ID (2/1 
vlan-id 1000 clips 131927) with len 30 to t
lv list
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: aaaidx_tree_insert: insert aaa_idx to idx tree for context 
rad_idx 2212 db_request_type Authentic
ation. (00:17:08:2e:76:d2)
Apr 4 17:43:26: %AAA-7-RADIUS: rad_send, Process radius requests in 
authen low priority queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: do_auth_send: Find free server 91.231.70.50 (ctx CLIPS, src 
port 1812, dst port 1812). (00:17:08:
2e:76:d2)
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/1 User_Name 
tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/2 User_Password 
tag=32 data_type=5 vlen=16 size=18
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/6 Service_Type 
tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/32 
NAS_Identifier tag=32 data_type=4 vlen=10 size=12
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/5 NAS_Port 
tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/62 
NAS_Real_Port tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/61 NAS_Port_Type 
tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/87 NAS_Port_ID 
tag=32 data_type=4 vlen=29 size=31
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/38 
Medium_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/145 
Mac-Address tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/98 
Platform_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/112 
OS_Version tag=32 data_type=4 vlen=7 size=9
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/202 
DHCP_Option tag=32 data_type=5 vlen=7 size=9
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 
50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

    0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
   16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
   32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
   48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
   64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
   80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
   96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
  112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
  128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
  144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
  160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
  176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
  192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
  208    61

Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius 
server  91.231.70.50 (1812).
Apr 4 17:43:26: %AAA-7-RADIUS: rad_process_send_queue, 1 requests 
processed (0 retransmit)
[local]ALFASYSTEM#show log active fac aaa since 2013:04:04:17:40
Apr 4 17:43:26: %AAA-7-RADIUS: rad_mgr, Process radius requests in db 
request queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: rad_process_aaad_req: Receive request (Authentication)
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_ATTR: 
aaa_idx 50000358: rad_add_attr_to_tlv_list, Add attr NAS_Port_ID (2/1 
vlan-id 1000 clips 131927) with len 30 to t
lv list
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: aaaidx_tree_insert: insert aaa_idx to idx tree for context 
rad_idx 2212 db_request_type Authentic
ation. (00:17:08:2e:76:d2)
Apr 4 17:43:26: %AAA-7-RADIUS: rad_send, Process radius requests in 
authen low priority queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: do_auth_send: Find free server 91.231.70.50 (ctx CLIPS, src 
port 1812, dst port 1812). (00:17:08:
2e:76:d2)
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/1 User_Name 
tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/2 User_Password 
tag=32 data_type=5 vlen=16 size=18
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/6 Service_Type 
tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/32 
NAS_Identifier tag=32 data_type=4 vlen=10 size=12
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/5 NAS_Port 
tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/62 
NAS_Real_Port tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/61 NAS_Port_Type 
tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/87 NAS_Port_ID 
tag=32 data_type=4 vlen=29 size=31
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/38 
Medium_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/145 
Mac-Address tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/98 
Platform_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/112 
OS_Version tag=32 data_type=4 vlen=7 size=9
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/202 
DHCP_Option tag=32 data_type=5 vlen=7 size=9
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 
50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

    0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
   16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
   32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
   48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
   64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
   80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
   96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
  112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
  128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
  144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
  160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
  176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
  192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
  208    61

Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius 
server  91.231.70.50 (1812).
Apr 4 17:43:26: %AAA-7-RADIUS: rad_process_send_queue, 1 requests 
processed (0 retransmit)
Apr 4 17:43:36: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: rad_process_time_q: Timer Pop moved 1 req to send q to be 
retransmitted
Apr 4 17:43:36: %AAA-7-RADIUS: rad_send, Process radius requests in 
authen low priority queue
Apr 4 17:43:36: [0258]: %AAA-7-RADIUS: rad_change_srv_state: Auto detect 
server connectivity function actived for server 91.231.70.50/1812

Apr 4 17:43:36: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 
50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

    0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
   16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
   32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
   48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
   64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
   80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
   96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
  112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
  128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
  144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
  160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
  176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
  192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
  208    61

Apr 4 17:43:36: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:36: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius 
server  91.231.70.50 (1812).
Apr 4 17:43:36: %AAA-7-RADIUS: rad_process_send_queue, 1 requests 
processed (1 retransmit)
Apr 4 17:43:46: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: rad_process_time_q: Timer Pop moved 1 req to send q to be 
retransmitted
Apr 4 17:43:46: %AAA-7-RADIUS: rad_send, Process radius requests in 
authen low priority queue
Apr 4 17:43:46: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 
50000358: do_auth_send: Use dead server (as last resort) 91.231.70.50 
(ctx CLIPS, src port 1812, dst port 1
812). (00:17:08:2e:76:d2)
Apr 4 17:43:46: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 
50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

    0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
   16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
   32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
   48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
   64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
   80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
   96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
  112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
  128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
  144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
  160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
  176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
  192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
  208    61

Apr 4 17:43:46: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:46: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius 
server  91.231.70.50 (1812).
Apr 4 17:43:46: %AAA-7-RADIUS: rad_process_send_queue, 1 requests 
processed (1 retransmit)


More debug "show log active fac clips":

Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-CCT: Assigned 
session-id 131929
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit 
create to ISM
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit 
flags IP to ISM
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit 
config to ISM session id 131929
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit 
state UP to ISM
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: 
Await-cct-up, was: Initial
Apr 4 17:51:20: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: Processed 
CREATE from dhcpd: flags=0x0 ip=192.168.0.4 ctx=0x0 giaddr=0.0.0.0 
mac=00:17:08:2e:76:d2 (new sesid=131929)
Apr 4 17:51:20: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: hostname len=4 
hostname=alfa
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:20: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/7/2/857
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:20: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/7/2/857
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM 
event: CCT state; CCT up
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: sub_event 2 
state: Await-cct-up
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: 
Sent-auth-req, was: Await-cct-up
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Sending 
authentication request to AAAd
Apr 4 17:51:20: %CLIPS-7-AUTH: authen_req: recreate: 0
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: [4] Hostname: alfa
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Authentication 
response status: Success
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: 
Await-IP, was: Sent-auth-req
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Sending session 
up to AAAd
Apr 4 17:51:21: [2/1:511:63:31/1/2/28668]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:21: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/1/2/28668
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:21: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/7/2/857
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-DHCP: Received DELETE 
(reason 17)
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: 
2/1:511:63:31/7/2/857: fsm_state Await-IP ism up 1 shut 0 dhcp 1 mac_set 
1 auth fail 0 del_pend 0 bounce 0 starting 0
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: 
Await-down-cplt, was: Await-IP
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Sending session 
down to AAAd; cause: No error was recorded (0)
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:22: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/7/2/857
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM 
event: CCT state; CCT del
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: sub_event 4 
state: Await-down-cplt
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: 
Unknown, was: Await-down-cplt
Apr 4 17:51:22: %CLIPS-7-ISM: ICR Lib processing ISM CCT DEL: 
2/1:511:63:31/7/2/857
Apr 4 17:51:22: [2/1:511:63:31/1/2/28668]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:22: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/1/2/28668
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-CCT: Assigned 
session-id 131930
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit 
create to ISM
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit 
flags IP to ISM
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit 
config to ISM session id 131930
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit 
state UP to ISM
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-FSM: State now: 
Await-cct-up, was: Initial
Apr 4 17:51:23: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: Processed 
CREATE from dhcpd: flags=0x0 ip=192.168.0.4 ctx=0x0 giaddr=0.0.0.0 
mac=00:17:08:2e:76:d2 (new sesid=131930)
Apr 4 17:51:23: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: hostname len=4 
hostname=alfa
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Processing ISM 
event: CCT state; CCT create
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: sub_event 3 
state: Await-cct-up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Processing ISM 
event: CCT cfg; CCT 1qcfg
Apr 4 17:51:23: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 
2/1:511:63:31/7/2/858
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Processing ISM 
event: CCT state; CCT up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: sub_event 2 
state: Await-cct-up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-FSM: State now: 
Sent-auth-req, was: Await-cct-up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: Sending 
authentication request to AAAd
Apr 4 17:51:23: %CLIPS-7-AUTH: authen_req: recreate: 0
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: [4] Hostname: alfa
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: Authentication 
response status: Success
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-FSM: State now: 
Await-IP, was: Sent-auth-req
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: Sending session 
up to AAAd



Any suggestions? Where to look, what to check, etc. Thx for help :)

> Your forward policy looks wicked
> Forward-Policy == "in:CLIPS-DEFAULT"
> are you sure that is the name of your forwarding policy? And if you are using netop make sure that this forwarding policy is the one in the database.
>
It's correct.

> Also double check that you have below Metering and policing on the router and that they are configured with the right rate and burst.
>       Qos-Policing-Profile-Name = "customer-out"
>       Qos-Metering-Profile-Name = "customer-in"
>
> Also if you are using netop check that you have those customer-out and customer-in in Netops service attribute Variation/bandwidth variation and that they point to existing valid customer-out and customer-in on the router.
I don't use netop.
>  From the look of it from your reply attributes they should look like..
>
> qos policy customer-out metering
>   rate 20480 burst 100000
> !
> qos customer-in policing
>   rate 2048 burst 10000
> !
I get QOS values from db.
> And of course make sure you have a context with the name "CLIPS" to bound the session to.
>
> And since i have never used below attributes in a SME before that makes me suspicious..Just make sure they aren't doing anything crazy:)
>       Connect-Info == "1"
>       Port-Limit == 1
Try it but without success.

-- 
Pozdrawiam,
Łukasz Kopiszka
tel. 694-212-718
www.alfa-system.pl



More information about the Freeradius-Users mailing list