Hi,<div><br></div><div>I hope someone on this lists still knows how to build this...</div><div>We have an old setup that authenticates ISDN dial-in users and puts them in a Cisco VRF depending on which user authenticates.</div>
<div>However this was all build about eight years ago using both home grown radius servers, etc.</div><div><br></div><div>At the moment I&#39;m trying to build a new platform using FreeRadius but I get stuck it seems at some point during the authentication</div>
<div>and setup of the session.</div><div><br></div><div>A quick overview of the setup:</div><div>Cisco 180x as dial-in router</div><div>Cisco AS5350 (NAS terminating the ISDN call) running IOS c5350-jk9s-mz.124-15.T9.bin</div>
<div>Cisco 7200 (VHG/PE terminating the VPDN tunnel and ultimately the PPP session) running IOS c7200-jk9s-mz.123-20.bin</div><div>Freeradius v1.1.3 (default that ships with CentOS 5.5) using MySQL as an backend.</div><div>
<br></div><div>I manage to get the call to dial-in, the NAS to setup the VPDN tunnel and the VHG to send the radius request to terminate the PPP</div><div>session. I actually see that the virtual-template gets cloned to a virtual-access interface - however after a few sessions the connection</div>
<div>drops and if I issue a &quot;show run&quot; on the virtual-access interface it does not seem to have any config on it.</div><div><br></div><div>I&#39;ve included the output of a debug of both the VHG as well as of the radius server at the end of this mail. I&#39;ve also included the running</div>
<div>configuration of the AS5350 and 7200 incase I did something wrong there. I realize this makes for a rather large email - my apologies.</div><div><br></div><div>I hope someone can tell me what it is that I&#39;m doing wrong.</div>
<div><br></div><div>Thanks a lot for taking the time to have a look.</div><div><br></div><div> - Jasper</div><div><br></div><div>------------</div><div><br></div><div>Debug VHG:</div><div><div>Aug 12 16:15:42.916 CEST: ppp55 PPP: Phase is ESTABLISHING</div>
<div>Aug 12 16:15:42.916 CEST: ppp55 PPP: Send Message[Dynamic Bind Response]</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP: I FORCED rcvd CONFACK len 30</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    AuthProto CHAP (0x0305C22305)</div>
<div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    MagicNumber 0x0D06A846 (0x05060D06A846)</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    MRRU 1524 (0x110405F4)</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    EndpointDisc 1 asd-tc3-ap01 (0x130F016173642D7463332D61703031)</div>
<div>Aug 12 16:15:42.916 CEST: ppp55 LCP: I FORCED sent CONFACK len 38</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    AuthProto CHAP (0x0305C22305)</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    MagicNumber 0x9A996122 (0x05069A996122)</div>
<div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    MRRU 1500 (0x110405DC)</div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:    EndpointDisc 1 <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a></div><div>Aug 12 16:15:42.916 CEST: ppp55 LCP:     (0x131701746573742D6B6C616E74406261)</div>
<div>Aug 12 16:15:42.916 CEST: ppp55 LCP:     (0x636B75702E6E6C)</div><div>Aug 12 16:15:42.916 CEST: ppp55 PPP: Phase is FORWARDING, Attempting Forward</div><div>Aug 12 16:15:42.916 CEST: ppp55 PPP SSS: Receive SSS-Mgr Connect-Local</div>
<div>Aug 12 16:15:42.916 CEST: ppp55 PPP: Phase is AUTHENTICATING, Unauthenticated User</div><div>Aug 12 16:15:42.916 CEST: RADIUS/ENCODE(0000003C):Orig. component type = VPDN</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  AAA Unsupported Attr: interface         [153] 14  </div>
<div>Aug 12 16:15:42.916 CEST: RADIUS:   55 6E 69 71 2D 53 65 73 73 2D 49 44              [Uniq-Sess-ID]</div><div>Aug 12 16:15:42.916 CEST: RADIUS(0000003C): Storing nasport 55 in rad_db</div><div>Aug 12 16:15:42.916 CEST: RADIUS(0000003C): Config NAS IP: 195.18.85.3</div>
<div>Aug 12 16:15:42.916 CEST: RADIUS/ENCODE(0000003C): acct_session_id: 60</div><div>Aug 12 16:15:42.916 CEST: RADIUS(0000003C): sending</div><div>Aug 12 16:15:42.916 CEST: RADIUS(0000003C): Send Access-Request to <a href="http://195.18.104.132:1812">195.18.104.132:1812</a> id 1645/71, len 114</div>
<div>Aug 12 16:15:42.916 CEST: RADIUS:  authenticator DD 7C 9E 37 25 71 75 C1 - 3A F2 17 44 A0 BA BF E4</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  User-Name           [1]   22  &quot;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&quot;</div>
<div>Aug 12 16:15:42.916 CEST: RADIUS:  CHAP-Password       [3]   19  *</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  NAS-Port            [5]   6   55                        </div>
<div>Aug 12 16:15:42.916 CEST: RADIUS:  Calling-Station-Id  [31]  12  &quot;0365465531&quot;</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  Called-Station-Id   [30]  11  &quot;207300300&quot;</div><div>Aug 12 16:15:42.916 CEST: RADIUS:  Service-Type        [6]   6   Framed                    [2]</div>
<div>Aug 12 16:15:42.916 CEST: RADIUS:  NAS-IP-Address      [4]   6   195.18.85.3               </div><div>Aug 12 16:15:42.920 CEST: RADIUS: Received from id 1645/71 <a href="http://195.18.104.132:1812">195.18.104.132:1812</a>, Access-Accept, len 150</div>
<div>Aug 12 16:15:42.920 CEST: RADIUS:  authenticator 4B 16 16 8C 36 79 DB 45 - 61 5E D1 5D 34 51 1A 0E</div><div>Aug 12 16:15:42.920 CEST: RADIUS:  Service-Type        [6]   6   Framed                    [2]</div><div>Aug 12 16:15:42.920 CEST: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]</div>
<div>Aug 12 16:15:42.920 CEST: RADIUS:  Vendor, Cisco       [26]  57  </div><div>Aug 12 16:15:42.920 CEST: RADIUS:   Cisco AVpair       [1]   51  &quot;lcp:interface-config=ip vrf forwarding test-klant&quot;</div><div>Aug 12 16:15:42.920 CEST: RADIUS:  Vendor, Cisco       [26]  55  </div>
<div>Aug 12 16:15:42.920 CEST: RADIUS:   Cisco AVpair       [1]   49  &quot;lcp:interface-config=ip unnumbered Loopback1132&quot;</div><div>Aug 12 16:15:42.920 CEST: RADIUS:  Framed-IP-Address   [8]   6   192.168.2.1               </div>
<div>Aug 12 16:15:42.920 CEST: RADIUS(0000003C): Received from id 1645/71</div><div>Aug 12 16:15:42.920 CEST: ppp55 PPP: Phase is FORWARDING, Attempting Forward</div><div>Aug 12 16:15:42.920 CEST: ppp55 PPP: Send Message[Connect Local]</div>
<div>Aug 12 16:15:42.920 CEST: Vi2 PPP: Phase is DOWN, Setup</div><div>Aug 12 16:15:42.920 CEST: ppp55 PPP: Bind to [Virtual-Access2]</div><div>Aug 12 16:15:42.920 CEST: Vi2 PPP: Send Message[Static Bind Response]</div><div>
Aug 12 16:15:42.924 CEST: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up</div><div>Aug 12 16:15:42.924 CEST: Vi2 PPP: Phase is AUTHENTICATING, Authenticated User</div><div>Aug 12 16:15:42.924 CEST: Vi2 CHAP: O SUCCESS id 2 len 4</div>
<div>Aug 12 16:15:43.924 CEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up</div><div>Aug 12 16:15:52.868 CEST: Vi2 CHAP: I CHALLENGE id 86 len 41 from &quot;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&quot;</div>
<div>Aug 12 16:15:52.868 CEST: RADIUS/ENCODE(0000003C): sendauth, failing over</div><div>Aug 12 16:15:52.868 CEST: RADIUS/ENCODE(0000003C): send packet; BEGIN</div><div>Aug 12 16:15:52.868 CEST: Vi2 CHAP: Unable to authenticate for peer</div>
<div>Aug 12 16:15:52.868 CEST: Vi2 PPP: Sending Acct Event[Down] id[3C]</div><div>Aug 12 16:15:52.868 CEST: Vi2 PPP: Phase is TERMINATING</div><div>Aug 12 16:15:52.868 CEST: Vi2 LCP: O TERMREQ [Open] id 1 len 4</div><div>
Aug 12 16:15:52.888 CEST: Vi2 LCP: I TERMACK [TERMsent] id 1 len 4</div><div>Aug 12 16:15:52.888 CEST: Vi2 LCP: State is Closed</div><div>Aug 12 16:15:52.888 CEST: Vi2 PPP: Phase is DOWN</div><div>Aug 12 16:15:52.888 CEST: Vi2 PPP: Send Message[Disconnect]</div>
<div>Aug 12 16:15:52.892 CEST: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down</div><div>Aug 12 16:15:53.868 CEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to down</div>
</div><div><br></div><div>------------------------</div><div><br></div><div>Debug radius:</div><div><div>rad_recv: Access-Request packet from host <a href="http://195.18.85.193:1645">195.18.85.193:1645</a>, id=42, length=122</div>
<div>        User-Name = &quot;<a href="http://backup.nl">backup.nl</a>&quot;</div><div>        User-Password = &quot;cisco&quot;</div><div>        NAS-Port = 20326</div><div>        NAS-Port-Id = &quot;Serial3/3:26&quot;</div>
<div>        NAS-Port-Type = ISDN</div><div>        Calling-Station-Id = &quot;0365465531&quot;</div><div>        Called-Station-Id = &quot;207300300&quot;</div><div>        Connect-Info = &quot;64000 HDLC&quot;</div><div>
        Service-Type = Dialout-Framed-User</div><div>        NAS-IP-Address = 195.18.85.193</div><div>  Processing the authorize section of radiusd.conf</div><div>modcall: entering group authorize for request 0</div><div>
  modcall[authorize]: module &quot;preprocess&quot; returns ok for request 0</div><div>radius_xlat:  &#39;/var/log/radius/radacct/auth-detail-20100812&#39;</div><div>rlm_detail: /var/log/radius/radacct/auth-detail-%Y%m%d expands to /var/log/radius/radacct/auth-detail-20100812</div>
<div>  modcall[authorize]: module &quot;auth_log&quot; returns ok for request 0</div><div>  modcall[authorize]: module &quot;chap&quot; returns noop for request 0</div><div>radius_xlat:  &#39;<a href="http://backup.nl">backup.nl</a>&#39;</div>
<div>rlm_sql (sql): sql_set_user escaped user --&gt; &#39;<a href="http://backup.nl">backup.nl</a>&#39;</div><div>radius_xlat:  &#39;SELECT id, UserName, Attribute, Value, op           FROM radcheck           WHERE Username = &#39;<a href="http://backup.nl">backup.nl</a>&#39;           ORDER BY id&#39;</div>
<div>rlm_sql (sql): Reserving sql socket id: 4</div><div>radius_xlat:  &#39;SELECT <a href="http://radgroupcheck.id">radgroupcheck.id</a>,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op  FROM radgroupcheck,usergroup WHERE usergroup.Username = &#39;<a href="http://backup.nl">backup.nl</a>&#39; AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY <a href="http://radgroupcheck.id">radgroupcheck.id</a>&#39;</div>
<div>radius_xlat:  &#39;SELECT id, UserName, Attribute, Value, op           FROM radreply           WHERE Username = &#39;<a href="http://backup.nl">backup.nl</a>&#39;           ORDER BY id&#39;</div><div>radius_xlat:  &#39;SELECT <a href="http://radgroupreply.id">radgroupreply.id</a>,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op  FROM radgroupreply,usergroup WHERE usergroup.Username = &#39;<a href="http://backup.nl">backup.nl</a>&#39; AND usergroup.GroupName = radgroupreply.GroupName ORDER BY <a href="http://radgroupreply.id">radgroupreply.id</a>&#39;</div>
<div>rlm_sql (sql): Released sql socket id: 4</div><div>  modcall[authorize]: module &quot;sql&quot; returns ok for request 0</div><div>modcall: leaving group authorize (returns ok) for request 0</div><div>auth: type Local</div>
<div>auth: user supplied User-Password matches local User-Password</div><div>  Processing the post-auth section of radiusd.conf</div><div>modcall: entering group post-auth for request 0</div><div>radius_xlat:  &#39;/var/log/radius/radacct/reply-detail-20100812&#39;</div>
<div>rlm_detail: /var/log/radius/radacct/reply-detail-%Y%m%d expands to /var/log/radius/radacct/reply-detail-20100812</div><div>  modcall[post-auth]: module &quot;reply_log&quot; returns ok for request 0</div><div>modcall: leaving group post-auth (returns ok) for request 0</div>
<div>Sending Access-Accept of id 42 to 195.18.85.193 port 1645</div><div>        Cisco-AVPair += &quot;vpdn:tunnel-id=AS5350-All&quot;</div><div>        Cisco-AVPair += &quot;vpdn:ip-addresses=195.18.85.3&quot;</div><div>
        Cisco-AVPair += &quot;vpdn:tunnel-type=l2tp&quot;</div><div>        Cisco-AVPair += &quot;vpdn:l2tp-tunnel-password=cisco&quot;</div><div>Finished request 0</div><div>Going to the next request</div><div>--- Walking the entire request list ---</div>
<div>Waking up in 6 seconds...</div><div>rad_recv: Access-Request packet from host <a href="http://195.18.85.3:1645">195.18.85.3:1645</a>, id=73, length=114</div><div>        Framed-Protocol = PPP</div><div>        User-Name = &quot;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&quot;</div>
<div>        CHAP-Password = 0x02011f8ce0ed5275d50c7a786cc7e47c6b</div><div>        NAS-Port-Type = Virtual</div><div>        NAS-Port = 57</div><div>        Calling-Station-Id = &quot;0365465531&quot;</div><div>        Called-Station-Id = &quot;207300300&quot;</div>
<div>        Service-Type = Framed-User</div><div>        NAS-IP-Address = 195.18.85.3</div><div>  Processing the authorize section of radiusd.conf</div><div>modcall: entering group authorize for request 1</div><div>  modcall[authorize]: module &quot;preprocess&quot; returns ok for request 1</div>
<div>radius_xlat:  &#39;/var/log/radius/radacct/auth-detail-20100812&#39;</div><div>rlm_detail: /var/log/radius/radacct/auth-detail-%Y%m%d expands to /var/log/radius/radacct/auth-detail-20100812</div><div>  modcall[authorize]: module &quot;auth_log&quot; returns ok for request 1</div>
<div>  rlm_chap: Setting &#39;Auth-Type := CHAP&#39;</div><div>  modcall[authorize]: module &quot;chap&quot; returns ok for request 1</div><div>radius_xlat:  &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;</div>
<div>rlm_sql (sql): sql_set_user escaped user --&gt; &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;</div><div>radius_xlat:  &#39;SELECT id, UserName, Attribute, Value, op           FROM radcheck           WHERE Username = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;           ORDER BY id&#39;</div>
<div>rlm_sql (sql): Reserving sql socket id: 3</div><div>radius_xlat:  &#39;SELECT <a href="http://radgroupcheck.id">radgroupcheck.id</a>,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op  FROM radgroupcheck,usergroup WHERE usergroup.Username = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39; AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY <a href="http://radgroupcheck.id">radgroupcheck.id</a>&#39;</div>
<div>radius_xlat:  &#39;SELECT id, UserName, Attribute, Value, op           FROM radreply           WHERE Username = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;           ORDER BY id&#39;</div>
<div>radius_xlat:  &#39;SELECT <a href="http://radgroupreply.id">radgroupreply.id</a>,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op  FROM radgroupreply,usergroup WHERE usergroup.Username = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39; AND usergroup.GroupName = radgroupreply.GroupName ORDER BY <a href="http://radgroupreply.id">radgroupreply.id</a>&#39;</div>
<div>rlm_sql (sql): Released sql socket id: 3</div><div>  modcall[authorize]: module &quot;sql&quot; returns ok for request 1</div><div>modcall: leaving group authorize (returns ok) for request 1</div><div>  rad_check_password:  Found Auth-Type CHAP</div>
<div>auth: type &quot;CHAP&quot;</div><div>  Processing the authenticate section of radiusd.conf</div><div>modcall: entering group CHAP for request 1</div><div>  rlm_chap: login attempt by &quot;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&quot; with CHAP password</div>
<div>  rlm_chap: Using clear text password test for user <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> authentication.</div><div>  rlm_chap: chap user <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> authenticated succesfully</div>
<div>  modcall[authenticate]: module &quot;chap&quot; returns ok for request 1</div><div>modcall: leaving group CHAP (returns ok) for request 1</div><div>  Processing the post-auth section of radiusd.conf</div><div>modcall: entering group post-auth for request 1</div>
<div>radius_xlat:  &#39;/var/log/radius/radacct/reply-detail-20100812&#39;</div><div>rlm_detail: /var/log/radius/radacct/reply-detail-%Y%m%d expands to /var/log/radius/radacct/reply-detail-20100812</div><div>  modcall[post-auth]: module &quot;reply_log&quot; returns ok for request 1</div>
<div>modcall: leaving group post-auth (returns ok) for request 1</div><div>Sending Access-Accept of id 73 to 195.18.85.3 port 1645</div><div>        Service-Type := Framed-User</div><div>        Framed-Protocol := PPP</div>
<div>        Cisco-AVPair += &quot;lcp:interface-config#1=ip vrf forwarding test-klant&quot;</div><div>        Cisco-AVPair += &quot;lcp:interface-config#2=ip vrf forwarding test-klant&quot;</div><div>Finished request 1</div>
<div>Going to the next request</div><div>Waking up in 6 seconds...</div><div>--- Walking the entire request list ---</div><div>Cleaning up request 0 ID 42 with timestamp 4c64044c</div><div>Cleaning up request 1 ID 73 with timestamp 4c64044c</div>
<div>Nothing to do.  Sleeping until we see a request.</div><div>rad_recv: Accounting-Request packet from host <a href="http://195.18.85.193:1646">195.18.85.193:1646</a>, id=43, length=263</div><div>        Acct-Session-Id = &quot;00000114&quot;</div>
<div>        Framed-Protocol = PPP</div><div>        Tunnel-Medium-Type:0 = IP</div><div>        Tunnel-Client-Endpoint:0 = &quot;195.18.85.193&quot;</div><div>        Tunnel-Server-Endpoint:0 = &quot;195.18.85.3&quot;</div>
<div>        Tunnel-Type:0 = L2TP</div><div>        Acct-Tunnel-Connection = &quot;1057600042&quot;</div><div>        Tunnel-Client-Auth-Id:0 = &quot;AS5350-All&quot;</div><div>        Tunnel-Server-Auth-Id:0 = &quot;asd-cap-dr03&quot;</div>
<div>        User-Name = &quot;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&quot;</div><div>        Acct-Authentic = RADIUS</div><div>        Acct-Session-Time = 10</div><div>        Acct-Input-Octets = 53</div>
<div>        Acct-Output-Octets = 16</div><div>        Acct-Input-Packets = 2</div><div>        Acct-Output-Packets = 2</div><div>        Acct-Terminate-Cause = Host-Request</div><div>        Acct-Status-Type = Stop</div>
<div>        NAS-Port = 20326</div><div>        NAS-Port-Id = &quot;Serial3/3:26&quot;</div><div>        NAS-Port-Type = ISDN</div><div>        Calling-Station-Id = &quot;0365465531&quot;</div><div>        Called-Station-Id = &quot;207300300&quot;</div>
<div>        Connect-Info = &quot;64000 HDLC&quot;</div><div>        Service-Type = Framed-User</div><div>        NAS-IP-Address = 195.18.85.193</div><div>        Acct-Delay-Time = 0</div><div>  Processing the preacct section of radiusd.conf</div>
<div>modcall: entering group preacct for request 2</div><div>  modcall[preacct]: module &quot;preprocess&quot; returns noop for request 2</div><div>rlm_acct_unique: Hashing &#39;NAS-Port = 20326,Client-IP-Address = 195.18.85.193,NAS-IP-Address = 195.18.85.193,Acct-Session-Id = &quot;00000114&quot;,User-Name = &quot;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&quot;&#39;</div>
<div>rlm_acct_unique: Acct-Unique-Session-ID = &quot;76ea71aaa12d8845&quot;.</div><div>  modcall[preacct]: module &quot;acct_unique&quot; returns ok for request 2</div><div>modcall: leaving group preacct (returns ok) for request 2</div>
<div>  Processing the accounting section of radiusd.conf</div><div>modcall: entering group accounting for request 2</div><div>radius_xlat:  &#39;/var/log/radius/radacct/detail-20100812&#39;</div><div>rlm_detail: /var/log/radius/radacct/detail-%Y%m%d expands to /var/log/radius/radacct/detail-20100812</div>
<div>  modcall[accounting]: module &quot;detail&quot; returns ok for request 2</div><div>  modcall[accounting]: module &quot;unix&quot; returns ok for request 2</div><div>radius_xlat:  &#39;/var/log/radius/radutmp&#39;</div>
<div>radius_xlat:  &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;</div><div>rlm_radutmp: Logout for NAS asd-tc3-ap01 port 20326, but no Login record</div><div>  modcall[accounting]: module &quot;radutmp&quot; returns ok for request 2</div>
<div>radius_xlat:  &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;</div><div>rlm_sql (sql): sql_set_user escaped user --&gt; &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;</div>
<div>radius_xlat:  &#39;UPDATE radacct SET AcctStopTime = &#39;2010-08-12 16:25:26&#39;, AcctSessionTime = &#39;10&#39;, AcctInputOctets = &#39;53&#39;, AcctOutputOctets = &#39;16&#39;, AcctTerminateCause = &#39;Host-Request&#39;, AcctStopDelay = &#39;0&#39;, ConnectInfo_stop = &#39;64000 HDLC&#39; WHERE AcctSessionId = &#39;00000114&#39; AND UserName = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39; AND NASIPAddress = &#39;195.18.85.193&#39;&#39;</div>
<div>rlm_sql (sql): Reserving sql socket id: 2</div><div>radius_xlat:  &#39;INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values(&#39;00000114&#39;, &#39;76ea71aaa12d8845&#39;, &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;, &#39;&#39;, &#39;195.18.85.193&#39;, &#39;20326&#39;, &#39;ISDN&#39;, DATE_SUB(&#39;2010-08-12 16:25:26&#39;, INTERVAL (10 + 0) SECOND), &#39;2010-08-12 16:25:26&#39;, &#39;10&#39;, &#39;RADIUS&#39;, &#39;&#39;, &#39;64000 HDLC&#39;, &#39;53&#39;, &#39;16&#39;, &#39;207300300&#39;, &#39;0365465531&#39;, &#39;Host-Request&#39;, &#39;Framed-User&#39;, &#39;PPP&#39;, &#39;&#39;, &#39;0&#39;, &#39;0&#39;)&#39;</div>
<div>rlm_sql (sql): Released sql socket id: 2</div><div>  modcall[accounting]: module &quot;sql&quot; returns ok for request 2</div><div>modcall: leaving group accounting (returns ok) for request 2</div><div>Sending Accounting-Response of id 43 to 195.18.85.193 port 1646</div>
<div>Finished request 2</div><div>Going to the next request</div><div>--- Walking the entire request list ---</div><div>Waking up in 6 seconds...</div><div>--- Walking the entire request list ---</div><div>Cleaning up request 2 ID 43 with timestamp 4c640456</div>
<div>Nothing to do.  Sleeping until we see a request.</div></div><div><br></div><div>-------------------</div><div><br></div><div>Database entries MySQL:</div><div><div>mysql&gt; select * from radcheck where UserName = &#39;<a href="http://backup.nl">backup.nl</a>&#39;;</div>
<div>+------+-----------+-----------+----+-------+</div><div>| id   | UserName  | Attribute | op | Value |</div><div>+------+-----------+-----------+----+-------+</div><div>| 1445 | <a href="http://backup.nl">backup.nl</a> | Password  | == | cisco | </div>
<div>+------+-----------+-----------+----+-------+</div><div>1 row in set (0.00 sec)</div><div><br></div><div><div>mysql&gt; select * from radreply where UserName = &#39;<a href="http://backup.nl">backup.nl</a>&#39;;</div>
<div>+------+-----------+--------------+----+---------------------------------+</div><div>| id   | UserName  | Attribute    | op | Value                           |</div><div>+------+-----------+--------------+----+---------------------------------+</div>
<div>| 2246 | <a href="http://backup.nl">backup.nl</a> | Cisco-AVPair | += | vpdn:tunnel-id=AS5350-All       | </div><div>| 2247 | <a href="http://backup.nl">backup.nl</a> | Cisco-AVPair | += | vpdn:ip-addresses=195.18.85.3   | </div>
<div>| 2248 | <a href="http://backup.nl">backup.nl</a> | Cisco-AVPair | += | vpdn:tunnel-type=l2tp           | </div><div>| 2249 | <a href="http://backup.nl">backup.nl</a> | Cisco-AVPair | += | vpdn:l2tp-tunnel-password=cisco | </div>
<div>+------+-----------+--------------+----+---------------------------------+</div><div>4 rows in set (0.00 sec)</div></div><div><br></div><div>mysql&gt; select * from radcheck where UserName = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;;</div>
<div>+------+----------------------+-----------+----+-------+</div><div>| id   | UserName             | Attribute | op | Value |</div><div>+------+----------------------+-----------+----+-------+</div><div>| 1444 | <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> | Password  | == | test  | </div>
<div>+------+----------------------+-----------+----+-------+</div><div>1 row in set (0.00 sec)</div><div><br></div><div>mysql&gt; select * from radreply where UserName = &#39;<a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a>&#39;;</div>
<div>+------+----------------------+-------------------+----+-----------------------------------------------------+</div><div>| id   | UserName             | Attribute         | op | Value                                               |</div>
<div>+------+----------------------+-------------------+----+-----------------------------------------------------+</div><div>| 2231 | <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> | Service-Type      | := | Framed-User                                         | </div>
<div>| 2250 | <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> | Framed-Protocol   | := | PPP                                                 | </div><div>| 2263 | <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> | Cisco-AVPair      | += | lcp:interface-config#1=ip vrf forwarding test-klant | </div>
<div>| 2264 | <a href="mailto:test-klant@backup.nl">test-klant@backup.nl</a> | Cisco-AVPair      | += | lcp:interface-config#2=ip vrf forwarding test-klant | </div><div>+------+----------------------+-------------------+----+-----------------------------------------------------+</div>
<div>4 rows in set (0.00 sec)</div><div><br></div></div>