Moore debug "show log fac aaa":

Apr 4 17:43:26: %AAA-7-RADIUS: rad_mgr, Process radius requests in db request queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: rad_process_aaad_req: Receive request (Authentication)
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_ATTR: aaa_idx 50000358: rad_add_attr_to_tlv_list, Add attr NAS_Port_ID (2/1 vlan-id 1000 clips 131927) with len 30 to t
lv list
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: aaaidx_tree_insert: insert aaa_idx to idx tree for context rad_idx 2212 db_request_type Authentic
ation. (00:17:08:2e:76:d2)
Apr 4 17:43:26: %AAA-7-RADIUS: rad_send, Process radius requests in authen low priority queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: do_auth_send: Find free server 91.231.70.50 (ctx CLIPS, src port 1812, dst port 1812). (00:17:08:
2e:76:d2)
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/1 User_Name tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/2 User_Password tag=32 data_type=5 vlen=16 size=18
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/6 Service_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/32 NAS_Identifier tag=32 data_type=4 vlen=10 size=12
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/5 NAS_Port tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/62 NAS_Real_Port tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/61 NAS_Port_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/87 NAS_Port_ID tag=32 data_type=4 vlen=29 size=31
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/38 Medium_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/145 Mac-Address tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/98 Platform_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/112 OS_Version tag=32 data_type=4 vlen=7 size=9
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/202 DHCP_Option tag=32 data_type=5 vlen=7 size=9
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

   0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
  16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
  32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
  48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
  64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
  80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
  96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
 112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
 128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
 144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
 160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
 176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
 192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
 208    61

Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius server  91.231.70.50 (1812).
Apr 4 17:43:26: %AAA-7-RADIUS: rad_process_send_queue, 1 requests processed (0 retransmit)
[local]ALFASYSTEM#show log active fac aaa since 2013:04:04:17:40
Apr 4 17:43:26: %AAA-7-RADIUS: rad_mgr, Process radius requests in db request queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: rad_process_aaad_req: Receive request (Authentication)
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_ATTR: aaa_idx 50000358: rad_add_attr_to_tlv_list, Add attr NAS_Port_ID (2/1 vlan-id 1000 clips 131927) with len 30 to t
lv list
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: aaaidx_tree_insert: insert aaa_idx to idx tree for context rad_idx 2212 db_request_type Authentic
ation. (00:17:08:2e:76:d2)
Apr 4 17:43:26: %AAA-7-RADIUS: rad_send, Process radius requests in authen low priority queue
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: do_auth_send: Find free server 91.231.70.50 (ctx CLIPS, src port 1812, dst port 1812). (00:17:08:
2e:76:d2)
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/1 User_Name tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/2 User_Password tag=32 data_type=5 vlen=16 size=18
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/6 Service_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/32 NAS_Identifier tag=32 data_type=4 vlen=10 size=12
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/5 NAS_Port tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/62 NAS_Real_Port tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/61 NAS_Port_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 1/87 NAS_Port_ID tag=32 data_type=4 vlen=29 size=31
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/38 Medium_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/145 Mac-Address tag=32 data_type=4 vlen=17 size=19
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/98 Platform_Type tag=32 data_type=2 vlen=4 size=6
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/112 OS_Version tag=32 data_type=4 vlen=7 size=9
Apr 4 17:43:26: %AAA-7-RAD_ATTR: rad_fill_attr_value: 2352/202 DHCP_Option tag=32 data_type=5 vlen=7 size=9
Apr 4 17:43:26: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

   0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
  16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
  32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
  48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
  64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
  80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
  96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
 112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
 128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
 144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
 160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
 176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
 192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
 208    61

Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:26: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius server  91.231.70.50 (1812).
Apr 4 17:43:26: %AAA-7-RADIUS: rad_process_send_queue, 1 requests processed (0 retransmit)
Apr 4 17:43:36: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: rad_process_time_q: Timer Pop moved 1 req to send q to be retransmitted
Apr 4 17:43:36: %AAA-7-RADIUS: rad_send, Process radius requests in authen low priority queue
Apr 4 17:43:36: [0258]: %AAA-7-RADIUS: rad_change_srv_state: Auto detect server connectivity function actived for server 91.231.70.50/1812

Apr 4 17:43:36: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

   0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
  16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
  32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
  48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
  64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
  80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
  96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
 112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
 128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
 144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
 160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
 176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
 192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
 208    61

Apr 4 17:43:36: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:36: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius server  91.231.70.50 (1812).
Apr 4 17:43:36: %AAA-7-RADIUS: rad_process_send_queue, 1 requests processed (1 retransmit)
Apr 4 17:43:46: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: rad_process_time_q: Timer Pop moved 1 req to send q to be retransmitted
Apr 4 17:43:46: %AAA-7-RADIUS: rad_send, Process radius requests in authen low priority queue
Apr 4 17:43:46: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RADIUS: aaa_idx 50000358: do_auth_send: Use dead server (as last resort) 91.231.70.50 (ctx CLIPS, src port 1812, dst port 1
812). (00:17:08:2e:76:d2)
Apr 4 17:43:46: [0258]: [2/1:511:63:31/7/2/855]: %AAA-7-RAD_PKT: aaa_idx 50000358: Send packet (209 bytes) to 91.231.70.50/1812 (00:17:08:2e:76:d2):

   0    01 8a 00 d1 1a bb b5 44 61 cd 05 90 95 aa f3 47
  16    46 c9 34 68 01 13 30 30 3a 31 37 3a 30 38 3a 32
  32    65 3a 37 36 3a 64 32 02 12 81 a3 9a b1 14 9c 7f
  48    32 8e 56 91 c5 26 39 7f 22 06 06 00 00 00 05 20
  64    0c 41 4c 46 41 53 59 53 54 45 4d 05 06 02 01 00
  80    00 1a 0c 00 00 09 30 3e 06 21 00 03 e8 3d 06 00
  96    00 00 05 57 1f 32 2f 31 20 76 6c 61 6e 2d 69 64
 112    20 31 30 30 30 20 63 6c 69 70 73 20 31 33 31 39
 128    32 37 1a 0c 00 00 09 30 26 06 00 00 00 0b 1a 19
 144    00 00 09 30 91 13 30 30 2d 31 37 2d 30 38 2d 32
 160    65 2d 37 36 2d 64 32 1a 0c 00 00 09 30 62 06 00
 176    00 00 04 1a 0f 00 00 09 30 70 09 36 2e 35 2e 31
 192    2e 35 1a 0f 00 00 09 30 ca 09 0c 0c 04 61 6c 66
 208    61

Apr 4 17:43:46: [0258]: %AAA-7-RADIUS: Using local address 91.231.70.5
Apr 4 17:43:46: [0258]: %AAA-7-RADIUS: do_send: 209 bytes send to radius server  91.231.70.50 (1812).
Apr 4 17:43:46: %AAA-7-RADIUS: rad_process_send_queue, 1 requests processed (1 retransmit)


More debug "show log active fac clips":

Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-CCT: Assigned session-id 131929
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit create to ISM
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit flags IP to ISM
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit config to ISM session id 131929
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Sending circuit state UP to ISM
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: Await-cct-up, was: Initial
Apr 4 17:51:20: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: Processed CREATE from dhcpd: flags=0x0 ip=192.168.0.4 ctx=0x0 giaddr=0.0.0.0 mac=00:17:08:2e:76:d2 (new sesid=131929)
Apr 4 17:51:20: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: hostname len=4 hostname=alfa
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:20: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/7/2/857
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:20: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/7/2/857
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM event: CCT state; CCT up
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: sub_event 2 state: Await-cct-up
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: Sent-auth-req, was: Await-cct-up
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Sending authentication request to AAAd
Apr 4 17:51:20: %CLIPS-7-AUTH: authen_req: recreate: 0
Apr 4 17:51:20: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: [4] Hostname: alfa
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Authentication response status: Success
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: Await-IP, was: Sent-auth-req
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Sending session up to AAAd
Apr 4 17:51:21: [2/1:511:63:31/1/2/28668]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:21: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/1/2/28668
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:21: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/7/2/857
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-DHCP: Received DELETE (reason 17)
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: 2/1:511:63:31/7/2/857: fsm_state Await-IP ism up 1 shut 0 dhcp 1 mac_set 1 auth fail 0 del_pend 0 bounce 0 starting 0
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: Await-down-cplt, was: Await-IP
Apr 4 17:51:21: [2/1:511:63:31/7/2/857]: %CLIPS-7-AUTH: Sending session down to AAAd; cause: No error was recorded (0)
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:22: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/7/2/857
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: Processing ISM event: CCT state; CCT del
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-ISM: sub_event 4 state: Await-down-cplt
Apr 4 17:51:22: [2/1:511:63:31/7/2/857]: %CLIPS-7-FSM: State now: Unknown, was: Await-down-cplt
Apr 4 17:51:22: %CLIPS-7-ISM: ICR Lib processing ISM CCT DEL: 2/1:511:63:31/7/2/857
Apr 4 17:51:22: [2/1:511:63:31/1/2/28668]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:22: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/1/2/28668
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-CCT: Assigned session-id 131930
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit create to ISM
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit flags IP to ISM
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit config to ISM session id 131930
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Sending circuit state UP to ISM
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-FSM: State now: Await-cct-up, was: Initial
Apr 4 17:51:23: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: Processed CREATE from dhcpd: flags=0x0 ip=192.168.0.4 ctx=0x0 giaddr=0.0.0.0 mac=00:17:08:2e:76:d2 (new sesid=131930)
Apr 4 17:51:23: [2/1:511:63:31/1/2/28668]: %CLIPS-7-DHCP: hostname len=4 hostname=alfa
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Processing ISM event: CCT state; CCT create
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: sub_event 3 state: Await-cct-up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Processing ISM event: CCT cfg; CCT 1qcfg
Apr 4 17:51:23: %CLIPS-7-ISM: ICR Lib processing ISM CCT CFG : 2/1:511:63:31/7/2/858
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: Processing ISM event: CCT state; CCT up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-ISM: sub_event 2 state: Await-cct-up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-FSM: State now: Sent-auth-req, was: Await-cct-up
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: Sending authentication request to AAAd
Apr 4 17:51:23: %CLIPS-7-AUTH: authen_req: recreate: 0
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: [4] Hostname: alfa
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: Authentication response status: Success
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-FSM: State now: Await-IP, was: Sent-auth-req
Apr 4 17:51:23: [2/1:511:63:31/7/2/858]: %CLIPS-7-AUTH: Sending session up to AAAd



Any suggestions? Where to look, what to check, etc. Thx for help :)

Your forward policy looks wicked
Forward-Policy == "in:CLIPS-DEFAULT"
are you sure that is the name of your forwarding policy? And if you are using netop make sure that this forwarding policy is the one in the database.

It's fine.

Also double check that you have below Metering and policing on the router and that they are configured with the right rate and burst.
     Qos-Policing-Profile-Name = "customer-out"
     Qos-Metering-Profile-Name = "customer-in"

Also if you are using netop check that you have those customer-out and customer-in in Netops service attribute Variation/bandwidth variation and that they point to existing valid customer-out and customer-in on the router.
I don't use netop.
>From the look of it from your reply attributes they should look like..

qos policy customer-out metering
 rate 20480 burst 100000
!
qos customer-in policing
 rate 2048 burst 10000
!
I get QOS values from db.

And of course make sure you have a context with the name "CLIPS" to bound the session to.

And since i have never used below attributes in a SME before that makes me suspicious..Just make sure they aren't doing anything crazy:)
     Connect-Info == "1"
     Port-Limit == 1
Try it but without success.

-- 
Pozdrawiam,
Łukasz Kopiszka
tel. 694-212-718
www.alfa-system.pl