Hi,

 

I try to send proxy request via freeradius-2.2.0, but as i can see in the debug output, freeradius didn`t process Accounting Response ( tcpdump shows, that server got response )

 

rad_recv: Accounting-Request packet from host 127.0.0.1 port 49935, id=13, length=202

                X-Ascend-Dial-Number != "<U+0557>\331\025"

                Acct-Session-Id != "d597d91572f51ab3"

                Service-Type != Framed-User

                Called-Station-Id != "orangewap"

                Acct-Link-Count != 1

                X-Ascend-Metric != 1928665779

                Acct-Authentic != Local

                Acct-Status-Type != Start

                NAS-IP-Address != 10.64.192.1

                X-Ascend-PRI-Number-Type != 8

                3GPP-SGSN-Address != 213.151.252.35

                Calling-Station-Id != "421905012405"

                X-Ascend-IPX-Alias != 4294967295

                Framed-Protocol != GPRS-PDP-Context

                User-Name != "421905012405"

                NAS-Identifier != "ggsn-01-bb1.orange.sk"

                Acct-Multi-Session-Id != "d597d9153962de6b"

                Framed-IP-Address != 10.10.1.1

(2) # Executing section preacct from file /app/radius/raddb/ggsn//sites-enabled/default

(2)   group preacct {

(2)  - entering group preacct {...}

(2)   [preprocess] = ok

(2) linelog :         escape: 'Start' -> 'Start'

(2) linelog :         expand: '%{Acct-Status-Type}' -> 'Start'

(2) linelog :         expand: 'Accounting-Request.%{%{Acct-Status-Type}:-unknown}' -> 'Accounting-Request.Start'

(2) linelog :         expand: '/app_log/radius/ggsn/ggsn-acct.dat' -> '/app_log/radius/ggsn/ggsn-acct.dat'

(2) linelog :         escape: 'Start' -> 'Start'

(2) linelog :         escape: '421905012405' -> '421905012405'

(2) linelog :         escape: '10.10.1.1' -> '10.10.1.1'

(2) linelog :         escape: 'orangewap' -> 'orangewap'

(2) linelog :         escape: '10.64.192.1' -> '10.64.192.1'

(2) linelog :         escape: '213.151.252.35' -> '213.151.252.35'

(2) linelog :         escape: 'd597d9153962de6b' -> 'd597d9153962de6b'

(2) linelog :         expand: '%{Acct-Status-Type}:%{Calling-Station-Id}:%{Framed-IP-Address}:%{Called-Station-Id}:%{NAS-IP-Address}:%{3GPP-SGSN-Address}:%{Acct-Multi-Session-Id}:%l' -> 'Start:421905012405:10.10.1.1:orangewap:10.64.192.1:213.151.252.35:d597d9153962de6b:1355835824'

(2)   [linelog] = ok

(2) suffix : No '@' in User-Name = "421905012405", looking up realm NULL

(2) suffix : No such realm "NULL"

(2)   [suffix] = noop

(2) files : acct_users: Matched entry DEFAULT at line 25

(2)   [files] = ok

(2) # Executing section accounting from file /app/radius/raddb/ggsn//sites-enabled/default

(2)   group accounting {

(2)  - entering group accounting {...}

(2) attr_filter.accounting_response :     expand: '%{User-Name}' -> '421905012405'

(2) attr_filter.accounting_response : Matched entry DEFAULT at line 103

(2)   [attr_filter.accounting_response] = updated

(2) # Executing section pre-proxy from file /app/radius/raddb/ggsn//sites-enabled/default

(2)   group pre-proxy {

(2)  - entering group pre-proxy {...}

(2) files : preproxy_users: Matched entry DEFAULT at line 33

(2) files :              expand: '%{Called-Station-Id}.%{3GPP-SGSN-Address}' -> 'orangewap.213.151.252.35'

(2)   [files] = ok

(2) Proxying request to home server 213.151.250.149 port 1813

Sending Accounting-Request of id 93 from 255.255.255.255 port 56347 to 213.151.250.149 port 1813

                X-Ascend-Dial-Number != "<U+0557>\331\025"

                Acct-Session-Id != "d597d91572f51ab3"

                Service-Type != Framed-User

                Called-Station-Id = "orangewap.213.151.252.35"

                Acct-Link-Count != 1

                X-Ascend-Metric != 1928665779

                Acct-Authentic != Local

                Acct-Status-Type != Start

                NAS-IP-Address != 10.64.192.1

                X-Ascend-PRI-Number-Type != 8

                3GPP-SGSN-Address != 213.151.252.35

                Calling-Station-Id != "421905012405"

                X-Ascend-IPX-Alias != 4294967295

                Framed-Protocol != GPRS-PDP-Context

                User-Name != "421905012405"

                NAS-Identifier != "ggsn-01-bb1.orange.sk"

                Acct-Multi-Session-Id != "d597d9153962de6b"

                Framed-IP-Address != 10.10.1.1

                Event-Timestamp != "Dec 18 2012 14:03:44 CET"

                Proxy-State != 0x3133

Waking up in 0.3 seconds.

Waking up in 0.4 seconds.

(2) Expecting proxy response no later than 14 seconds from now

Waking up in 13.1 seconds.

(2) No proxy response, giving up on request and marking it done

(2) Failing request due to lack of any response from home server 213.151.250.149 port 1813

No Post-Proxy-Type Fail: ignoring

(2) Cleaning up request packet ID 13 with timestamp +323

Ready to process requests.

 

Here is tcp dump of the communication between freeradius and 3rdparty radius server:

 

14:03:44.828028 IP (tos 0x0, ttl  64, id 16529, offset 0, flags [none], proto: UDP (17), length: 255) tdrad1.vas.orange.sk.56347 > dial-250-149.orange.sk.radius-acct: [bad udp cksum 9e40!] RADIUS, length: 227

                Accounting Request (4), id: 0x5d, Authenticator: 872eb1da3e3ae0c483a4ee7eec20d78c

                  Unknown Attribute (227), length: 12, Value:

                    0x0000:  3c55 2b30 3535 373e d915

                  Accounting Session ID Attribute (44), length: 18, Value: d597d91572f51ab3

                    0x0000:  6435 3937 6439 3135 3732 6635 3161 6233

                  Service Type Attribute (6), length: 6, Value: Framed

                    0x0000:  0000 0002

                  Called Station Attribute (30), length: 26, Value: orangewap.213.151.252.35

                    0x0000:  6f72 616e 6765 7761 702e 3231 332e 3135

                    0x0010:  312e 3235 322e 3335

                  Accounting Link Count Attribute (51), length: 6, Value: 1

                    0x0000:  0000 0001

                  Unknown Attribute (225), length: 6, Value:

                    0x0000:  72f5 1ab3

                  Accounting Authentication Attribute (45), length: 6, Value: Local

                    0x0000:  0000 0002

                  Accounting Status Attribute (40), length: 6, Value: Start

                    0x0000:  0000 0001

                  NAS IP Address Attribute (4), length: 6, Value: 10.64.192.1

                    0x0000:  0a40 c001

                  Unknown Attribute (226), length: 6, Value:

                    0x0000:  0000 0008

                  Vendor Specific Attribute (26), length: 12, Value: Vendor: 3GPP (10415)

                    Vendor Attribute: 6, Length: 4, Value: ...#

                    0x0000:  0000 28af 0606 d597 fc23

                  Calling Station Attribute (31), length: 14, Value: 421905012405

                    0x0000:  3432 3139 3035 3031 3234 3035

                 Unknown Attribute (224), length: 6, Value:

                    0x0000:  ffff ffff

                  Framed Protocol Attribute (7), length: 6, Value: #7

                    0x0000:  0000 0007

                  Username Attribute (1), length: 14, Value: 421905012405

                    0x0000:  3432 3139 3035 3031 3234 3035

                  NAS ID Attribute (32), length: 23, Value: ggsn-01-bb1.orange.sk

                    0x0000:  6767 736e 2d30 312d 6262 312e 6f72 616e

                    0x0010:  6765 2e73 6b

                  Accounting Multilink Session ID Attribute (50), length: 18, Value: d597d9153962de6b

                    0x0000:  6435 3937 6439 3135 3339 3632 6465 3662

                  Framed IP Address Attribute (8), length: 6, Value: 10.10.1.1

                    0x0000:  0a0a 0101

                  Event Timestamp Attribute (55), length: 6, Value: Tue Dec 18 14:03:44 2012

                    0x0000:  50d0 69b0

                  Proxy State Attribute (33), length: 4, Value: 13

                    0x0000:  3133

14:03:44.832901 IP (tos 0x0, ttl  56, id 0, offset 0, flags [DF], proto: UDP (17), length: 52) dial-250-149.orange.sk.radius-acct > tdrad1.vas.orange.sk.56347: [udp sum ok] RADIUS, length: 24

                Accounting Response (5), id: 0x5d, Authenticator: d2521d74f782356ebf2d752e94dbfc82

                  Proxy State Attribute (33), length: 4, Value: 13

                    0x0000:  3133

 

Peter Balšianok

Data Service Operation Coordinator,

Voice & Data Services Operations

Orange Slovensko, a. s.
Metodova 8, 821 08 Bratislava
tel: +421 908 00 2405
mobil: +421 905 012 405
e-mail: peter.balsianok@orange.sk