Hello, i have some troubles with a cisco NAS, with a 4GB problem in the Accounting Data. First i have gigawords enabled, also the sql queries, but this is not the reason. I have also accounting for the upstream interface enabled, but the error exists only for users, that are connected via virtual-interfaces (pptp dialup). Maybe this problem is not realy radius related, but i hope to find an answer. I included some log entries and config examples, maybe someone has any experience with this errors. regards, Andreas M. Here is the last interim update: Tue Apr 15 23:23:46 2008 Acct-Session-Id = "00000006" Tunnel-Medium-Type:0 = IPv4 Tunnel-Assignment-Id:0 = "1" Tunnel-Server-Auth-Id:0 = "A_Router" Acct-Tunnel-Connection = "40682" Framed-Protocol = PPP Framed-IP-Address = 10.1.0.1 User-Name = "6543765" Acct-Session-Time = 28088 Acct-Input-Octets = 18615686 Acct-Output-Octets = 218389141 Acct-Input-Packets = 226199 Acct-Output-Packets = 305451 Acct-Authentic = RADIUS Acct-Status-Type = Interim-Update NAS-Port-Type = Virtual NAS-Port = 3 NAS-Port-Id = "Uniq-Sess-ID3" Service-Type = Framed-User NAS-IP-Address = 192.168.1.11 Acct-Delay-Time = 0 Client-IP-Address = 192.168.1.11 Acct-Unique-Session-Id = "ba144af9c3c26fc1" Timestamp = 1208294626 Here is the last stop record from the nas: Tue Apr 15 23:26:28 2008 Acct-Session-Id = "00000006" Tunnel-Medium-Type:0 = IPv4 Tunnel-Assignment-Id:0 = "1" Tunnel-Server-Auth-Id:0 = "A_Router" Acct-Tunnel-Connection = "40682" Framed-Protocol = PPP Framed-IP-Address = 10.1.0.1 User-Name = "6543765" Acct-Authentic = RADIUS Acct-Session-Time = 28250 Acct-Input-Octets = 4294967295 Acct-Output-Octets = 4294966951 Acct-Input-Packets = 0 Acct-Output-Packets = 4294967290 Acct-Terminate-Cause = NAS-Error Acct-Status-Type = Stop NAS-Port-Type = Virtual NAS-Port = 3 NAS-Port-Id = "Uniq-Sess-ID3" Service-Type = Framed-User NAS-IP-Address = 192.168.1.11 Acct-Delay-Time = 0 Client-IP-Address = 192.168.1.11 Acct-Unique-Session-Id = "ba144af9c3c26fc1" Timestamp = 1208294788 Cisco config: System image file is "flash:c180x-advipservicesk9-mz.124-11.XW6.bin" A_Router#sh aaa attributes | inc giga Type=118 Name=input-giga-words Format=Ulong Type=250 Name=output-giga-words Format=Ulong aaa new-model ! ! aaa authentication login default local aaa authentication ppp default group radius local aaa authorization exec default local aaa authorization commands 15 default local aaa authorization network default group radius local aaa accounting delay-start aaa accounting nested aaa accounting update periodic 3 aaa accounting network default start-stop group radius interface Virtual-Template1 ip unnumbered Loopback0 ip nat inside no ip virtual-reassembly no logging event link-status no snmp trap link-status ppp encrypt mppe 128 required ppp authentication ms-chap ms-chap-v2
Hi, your accounting packets don't include the Gigawords attributes. Try adding aaa accounting gigawords to your IOS config. This may require a NAS reboot on some IOS versions(!!!). Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Hello, i´ve done this already twice, but why does this happen only on virtual access interfaces and not on the upstream interface ?! I never saw the gigaword attribute, i think they are only send, when it is necessary, or is this wrong ? r, Andreas M. Stefan Winter schrieb:
Hi,
your accounting packets don't include the Gigawords attributes. Try adding aaa accounting gigawords
to your IOS config. This may require a NAS reboot on some IOS versions(!!!).
Greetings,
Stefan Winter
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Stefan Winter schrieb:
Hi,
your accounting packets don't include the Gigawords attributes. Try adding
aaa accounting gigawords
to your IOS config. This may require a NAS reboot on some IOS versions(!!!).
Greetings,
Stefan Winter
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- g, Andreas M.
I never saw the gigaword attribute, i think they are only send, when it is necessary, or is this wrong ?
I'm not sure. I think I saw them filled with 0 as appropriate. Did IOS tell you to reboot the NAS before the setting takes effect? Did you do that? If that doesn't help, read your NAS documentation. I'm not a Cisco employee and will not do their work. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Hello, yes i rebooted the router, i was also not able to find similiar proplems on cisco pages. Maybe it is easier to report this to cisco, i thought anyone had same troubles. thanks so far. r, Andreas M. Stefan Winter schrieb:
I never saw the gigaword attribute, i think they are only send, when it is necessary, or is this wrong ?
I'm not sure. I think I saw them filled with 0 as appropriate. Did IOS tell you to reboot the NAS before the setting takes effect? Did you do that?
If that doesn't help, read your NAS documentation. I'm not a Cisco employee and will not do their work.
Stefan
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- g, Andreas M.
participants (2)
-
Andreas M. -
Stefan Winter