Freeradius mysql ippool duplicate IP's
Hi there, We are using FreeRADIUS Version 2.1.12 on CentOS 6 The problem we are getting is that we are getting duplicate IP address issues on our network when assigning IP's via the mysql ippool setup. Have looked through many forums & help boards but still no joy Please advise what information you require for you to assist me. Regards
Strange. Normal DHCP assignment from IP addressing means the database is tagged showing that the IP address is in use..... If you have two DHCP servers on the same broadcast network then they MUST have different pools of addresses. DHCP itself is initiated with a broadcast packet and responds to the first packet it receives from a server. Duplicate addresses suggest either the database is not updating it's records or there is a secondary DHCP server with the same pool of addresses on the broadcast network (Same subnet) also issuing the addresses. Have you checked this? Sent from my iPad
On 20 Nov 2014, at 08:36, Wesley <wesley@megs.co.za> wrote:
Hi there,
We are using FreeRADIUS Version 2.1.12 on CentOS 6 The problem we are getting is that we are getting duplicate IP address issues on our network when assigning IP's via the mysql ippool setup.
Have looked through many forums & help boards but still no joy
Please advise what information you require for you to assist me.
Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wesley wrote:
We are using FreeRADIUS Version 2.1.12 on CentOS 6 The problem we are getting is that we are getting duplicate IP address issues on our network when assigning IP's via the mysql ippool setup.
FreeRADIUS assigns an IP when it thinks the IP is free. So the problem here is that the IP is still in use... and FreeRADIUS doesn't know it's still in use.
Please advise what information you require for you to assist me.
Your NAS isn't sending accounting packets. Or, it's not sending interim-update packets. Fix the NAS, or increase the lifetime of the IPs. Alan DeKok.
We are using Mikrotik's as the NAS's, they are setup to send interum updates every 30 minutes, The lease time has been increased to 7 days which has not made any noticeable difference. if you require config file print outs please advise or log's On 2014/11/20 04:17 PM, Alan DeKok wrote:
Wesley wrote:
We are using FreeRADIUS Version 2.1.12 on CentOS 6 The problem we are getting is that we are getting duplicate IP address issues on our network when assigning IP's via the mysql ippool setup. FreeRADIUS assigns an IP when it thinks the IP is free. So the problem here is that the IP is still in use... and FreeRADIUS doesn't know it's still in use.
Please advise what information you require for you to assist me. Your NAS isn't sending accounting packets. Or, it's not sending interim-update packets.
Fix the NAS, or increase the lifetime of the IPs.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wesley wrote:
We are using Mikrotik's as the NAS's, they are setup to send interum updates every 30 minutes, The lease time has been increased to 7 days which has not made any noticeable difference.
Changing the lease time might help, but it won't solve the problem.
if you require config file print outs please advise or log's
You should run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list. The interim update packets are meant to keep the lease alive. If the lease isn't being kept alive, then (a) the server isn't receiving the packets, or (b) it's not configured to do anything with them, or (c) they don't contain the right information. Find out which one it is. Alan DeKok.
Anything in specific that I should look out for in the debug since there are thousands of requests going through there that radius server from other clients who have the ip pools on the mikrotik its self. so need to prune the output a bit. Regards On 2014/11/21 02:56 PM, Alan DeKok wrote:
Wesley wrote:
We are using Mikrotik's as the NAS's, they are setup to send interum updates every 30 minutes, The lease time has been increased to 7 days which has not made any noticeable difference. Changing the lease time might help, but it won't solve the problem.
if you require config file print outs please advise or log's You should run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list.
The interim update packets are meant to keep the lease alive. If the lease isn't being kept alive, then (a) the server isn't receiving the packets, or (b) it's not configured to do anything with them, or (c) they don't contain the right information.
Find out which one it is.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wesley wrote:
Anything in specific that I should look out for in the debug since there are thousands of requests going through there
Pick one user, and turn on debugging just for him. See raddebug. Or, create a test work. So you can test configurations before they go live. Alan DeKok.
After lots of log watching & trying different things to resolve other odd messages in the log I can confirm that if i drop the pppoe connection it will release it & then reassign generally the same IP. If the NAS looses connectivity/power and then comes back, none of the old leases are re-assigned to the same users once connectivity/power is restored, they just get assigned new IP's. mysql> select * from radippool where pool_name = 'megswb_priv' AND username like 'pierre%'; +-----+-------------+-----------------+---------------+-----------------+-------------------+---------------------+---------------------+-------------------+ | id | pool_name | framedipaddress | nasipaddress | calledstationid | callingstationid | expiry_time | username | pool_key | +-----+-------------+-----------------+---------------+-----------------+-------------------+---------------------+---------------------+-------------------+ | 401 | megswb_priv | 10.21.45.145 | 172.21.250.38 | | 00:0C:42:D2:FD:81 | 2014-12-02 13:35:54 | pierre@domain.co.za | 00:0C:42:D2:FD:81 | | 522 | megswb_priv | 10.21.46.10 | 172.21.250.38 | | 00:0C:42:D2:FD:81 | 2014-12-02 13:36:37 | pierre@domain.co.za | 00:0C:42:D2:FD:81 | | 856 | megswb_priv | 10.21.47.88 | 172.21.250.38 | | 00:0C:42:D2:FD:81 | 2014-12-02 13:48:34 | pierre@domain.co.za | 00:0C:42:D2:FD:81 | +-----+-------------+-----------------+---------------+-----------------+-------------------+---------------------+---------------------+-------------------+ Any help to what setting I should be looking at or what message from debug/log file i need to be searching for regarding the above mentioned issue.. Thanks On 2014/11/21 04:34 PM, Alan DeKok wrote:
Wesley wrote:
Anything in specific that I should look out for in the debug since there are thousands of requests going through there Pick one user, and turn on debugging just for him. See raddebug.
Or, create a test work. So you can test configurations before they go live.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wesley wrote:
After lots of log watching & trying different things to resolve other odd messages in the log I can confirm that if i drop the pppoe connection it will release it & then reassign generally the same IP.
And *why* does it do that? You have access to the debug logs. You've been told to read them. Yet you're not reading them. The ONLY WAY you will solve this issue is by reading the debug logs. Everything else you do is a complete and total waste of your time.
If the NAS looses connectivity/power and then comes back, none of the old leases are re-assigned to the same users once connectivity/power is restored, they just get assigned new IP's.
That isn't a problem.
Any help to what setting I should be looking at or what message from debug/log file i need to be searching for regarding the above mentioned issue..
Read the debug logs to see what's happening. I don't know what you've changed on your system, because you've been careful not to say. I don't know what is going on in your system, because you're not looking at the debug logs. Again, the ONLY reason FreeRADIUS assigns an IP is because it thinks that the IP is free. If you're getting duplicate IP assignments, it's because something ELSE in the network isn't telling FreeRADIUS that the IP is still in use. I've said this repeatedly, and you don't seem to be paying attention. Is the NAS sending Interim-Update (or Alive) packets? If not, THAT is the source of the problem. Fix it. For v2.x, read "raddb/sql/mysql/ippool.conf" The comments in that file explain how it works. They explain what the queries do. And when they're run. If you're going to only look at the *results* of the IP address assignment, you will never know *why* an IP was assigned. Alan DeKok.
Ok here are the logs from: /var/log/radius/radacct/41.76.216.246/detail-20141125 I will get you the debug log for a user once i figure out exactly how raddebug -u works... sorry if im not 100% clued up on this, but I am trying my best since this duplicate IP issue has been given to me to sort out Tue Nov 25 07:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 07:09:11 SAST" Acct-Session-Time = 57600 Acct-Input-Octets = 1965871 Acct-Input-Gigawords = 0 Acct-Input-Packets = 28972 Acct-Output-Octets = 594314 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6017 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416892151 -- Tue Nov 25 07:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 07:39:11 SAST" Acct-Session-Time = 59400 Acct-Input-Octets = 2426931 Acct-Input-Gigawords = 0 Acct-Input-Packets = 35924 Acct-Output-Octets = 594314 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6017 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416893951 -- Tue Nov 25 08:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 08:09:11 SAST" Acct-Session-Time = 61200 Acct-Input-Octets = 2881095 Acct-Input-Gigawords = 0 Acct-Input-Packets = 42765 Acct-Output-Octets = 594314 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6017 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416895751 -- Tue Nov 25 08:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 08:39:11 SAST" Acct-Session-Time = 63000 Acct-Input-Octets = 3181631 Acct-Input-Gigawords = 0 Acct-Input-Packets = 47275 Acct-Output-Octets = 594314 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6017 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416897551 -- Tue Nov 25 09:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 09:09:11 SAST" Acct-Session-Time = 64800 Acct-Input-Octets = 3504298 Acct-Input-Gigawords = 0 Acct-Input-Packets = 52047 Acct-Output-Octets = 594314 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6017 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416899351 -- Tue Nov 25 09:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 09:39:11 SAST" Acct-Session-Time = 66600 Acct-Input-Octets = 3810276 Acct-Input-Gigawords = 0 Acct-Input-Packets = 56546 Acct-Output-Octets = 594314 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6017 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416901151 -- Tue Nov 25 10:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 10:09:11 SAST" Acct-Session-Time = 68400 Acct-Input-Octets = 4155495 Acct-Input-Gigawords = 0 Acct-Input-Packets = 61592 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416902951 -- Tue Nov 25 10:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 10:39:11 SAST" Acct-Session-Time = 70200 Acct-Input-Octets = 4403347 Acct-Input-Gigawords = 0 Acct-Input-Packets = 65300 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416904751 -- Tue Nov 25 11:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 11:09:11 SAST" Acct-Session-Time = 72000 Acct-Input-Octets = 4656703 Acct-Input-Gigawords = 0 Acct-Input-Packets = 69070 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416906551 -- Tue Nov 25 11:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 11:39:11 SAST" Acct-Session-Time = 73800 Acct-Input-Octets = 4888290 Acct-Input-Gigawords = 0 Acct-Input-Packets = 72538 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416908351 -- Tue Nov 25 12:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 12:09:11 SAST" Acct-Session-Time = 75600 Acct-Input-Octets = 5283990 Acct-Input-Gigawords = 0 Acct-Input-Packets = 78473 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416910151 -- Tue Nov 25 12:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 12:39:11 SAST" Acct-Session-Time = 77400 Acct-Input-Octets = 5541580 Acct-Input-Gigawords = 0 Acct-Input-Packets = 82343 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416911951 -- Tue Nov 25 13:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 13:09:11 SAST" Acct-Session-Time = 79200 Acct-Input-Octets = 5841743 Acct-Input-Gigawords = 0 Acct-Input-Packets = 87033 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416913751 -- Tue Nov 25 13:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 13:39:11 SAST" Acct-Session-Time = 81000 Acct-Input-Octets = 6077890 Acct-Input-Gigawords = 0 Acct-Input-Packets = 90599 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416915551 -- Tue Nov 25 14:09:12 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 14:09:11 SAST" Acct-Session-Time = 82800 Acct-Input-Octets = 6281832 Acct-Input-Gigawords = 0 Acct-Input-Packets = 93633 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416917352 -- Tue Nov 25 14:39:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 14:39:11 SAST" Acct-Session-Time = 84600 Acct-Input-Octets = 6495494 Acct-Input-Gigawords = 0 Acct-Input-Packets = 96840 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416919151 -- Tue Nov 25 15:09:11 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 15:09:11 SAST" Acct-Session-Time = 86400 Acct-Input-Octets = 6571300 Acct-Input-Gigawords = 0 Acct-Input-Packets = 97885 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" Timestamp = 1416920951 -- Tue Nov 25 15:09:12 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15728652 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e0000c" Framed-IP-Address = 10.21.46.134 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 15:09:11 SAST" Acct-Session-Time = 86400 Acct-Input-Octets = 6571300 Acct-Input-Gigawords = 0 Acct-Input-Packets = 97885 Acct-Output-Octets = 678482 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6647 Acct-Status-Type = Stop Acct-Terminate-Cause = Session-Timeout NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5be6aaf16df780ba" -- Tue Nov 25 15:09:15 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735842 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c00" Framed-IP-Address = 10.21.45.69 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 15:09:15 SAST" Acct-Status-Type = Start NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "28aaafc694783b25" Timestamp = 1416920955 -- Tue Nov 25 15:39:15 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735842 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c00" Framed-IP-Address = 10.21.45.69 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 15:39:15 SAST" Acct-Session-Time = 1800 Acct-Input-Octets = 161748 Acct-Input-Gigawords = 0 Acct-Input-Packets = 1204 Acct-Output-Octets = 479986 Acct-Output-Gigawords = 0 Acct-Output-Packets = 1221 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "28aaafc694783b25" Timestamp = 1416922755 -- Tue Nov 25 16:09:15 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735842 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c00" Framed-IP-Address = 10.21.45.69 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:09:15 SAST" Acct-Session-Time = 3600 Acct-Input-Octets = 1448550 Acct-Input-Gigawords = 0 Acct-Input-Packets = 10382 Acct-Output-Octets = 12710081 Acct-Output-Gigawords = 0 Acct-Output-Packets = 12424 Acct-Status-Type = Interim-Update NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "28aaafc694783b25" Timestamp = 1416924555 -- Tue Nov 25 16:11:19 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735842 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c00" Framed-IP-Address = 10.21.45.69 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:18 SAST" Acct-Session-Time = 3723 Acct-Input-Octets = 1517134 Acct-Input-Gigawords = 0 Acct-Input-Packets = 10789 Acct-Output-Octets = 12988559 Acct-Output-Gigawords = 0 Acct-Output-Packets = 12864 Acct-Status-Type = Stop Acct-Terminate-Cause = NAS-Request NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "28aaafc694783b25" -- Tue Nov 25 16:11:19 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735859 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c0c" Framed-IP-Address = 10.21.46.29 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:19 SAST" Acct-Status-Type = Start NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "2d10a75c6fefd7f1" Timestamp = 1416924679 Tue Nov 25 16:11:22 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735859 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c0c" Framed-IP-Address = 10.21.46.29 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:22 SAST" Acct-Session-Time = 2 Acct-Input-Octets = 389 Acct-Input-Gigawords = 0 Acct-Input-Packets = 14 Acct-Output-Octets = 153 Acct-Output-Gigawords = 0 Acct-Output-Packets = 11 Acct-Status-Type = Stop Acct-Terminate-Cause = NAS-Request NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "2d10a75c6fefd7f1" -- Tue Nov 25 16:11:22 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735859 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c0c" Framed-IP-Address = 10.21.46.29 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:22 SAST" Acct-Session-Time = 2 Acct-Input-Octets = 389 Acct-Input-Gigawords = 0 Acct-Input-Packets = 14 Acct-Output-Octets = 153 Acct-Output-Gigawords = 0 Acct-Output-Packets = 11 Acct-Status-Type = Stop Acct-Terminate-Cause = NAS-Request NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "2d10a75c6fefd7f1" -- Tue Nov 25 16:11:22 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735860 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c0d" Framed-IP-Address = 10.21.46.29 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:22 SAST" Acct-Status-Type = Start NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "6c2d0d4280273711" Timestamp = 1416924682 Tue Nov 25 16:11:35 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735866 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c13" Framed-IP-Address = 10.21.46.36 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:35 SAST" Acct-Status-Type = Start NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "5c686a6c2727b58f" Timestamp = 1416924695 -- Tue Nov 25 16:11:48 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735871 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c18" Framed-IP-Address = 10.21.46.8 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:11:48 SAST" Acct-Status-Type = Start NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "28eea5894cf79308" Timestamp = 1416924708 -- Tue Nov 25 16:21:17 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735871 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c18" Framed-IP-Address = 10.21.46.8 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:21:17 SAST" Acct-Session-Time = 569 Acct-Input-Octets = 669452 Acct-Input-Gigawords = 0 Acct-Input-Packets = 3691 Acct-Output-Octets = 5054707 Acct-Output-Gigawords = 0 Acct-Output-Packets = 4891 Acct-Status-Type = Stop Acct-Terminate-Cause = NAS-Request NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "28eea5894cf79308" -- Tue Nov 25 16:21:20 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 15735877 NAS-Port-Type = Ethernet User-Name = "kamonande@domain.co.za" Calling-Station-Id = "00:0C:42:DA:04:C6" Called-Station-Id = "megswb-kamonade-relay-2" NAS-Port-Id = "ether3" MS-CHAP-Domain = "domain.co.za" Acct-Session-Id = "81e01c1d" Framed-IP-Address = 10.21.46.100 Acct-Authentic = RADIUS Event-Timestamp = "Nov 25 2014 16:21:20 SAST" Acct-Status-Type = Start NAS-Identifier = "Kamonande Relay" Acct-Delay-Time = 0 Mikrotik-Realm = "domain.co.za" NAS-IP-Address = 172.21.250.38 Acct-Unique-Session-Id = "12ab7c8a4fe5419f" Timestamp = 1416925280 On 2014/11/25 03:18 PM, Alan DeKok wrote:
Wesley wrote:
After lots of log watching & trying different things to resolve other odd messages in the log I can confirm that if i drop the pppoe connection it will release it & then reassign generally the same IP. And *why* does it do that? You have access to the debug logs. You've been told to read them. Yet you're not reading them.
The ONLY WAY you will solve this issue is by reading the debug logs. Everything else you do is a complete and total waste of your time.
If the NAS looses connectivity/power and then comes back, none of the old leases are re-assigned to the same users once connectivity/power is restored, they just get assigned new IP's. That isn't a problem.
Any help to what setting I should be looking at or what message from debug/log file i need to be searching for regarding the above mentioned issue.. Read the debug logs to see what's happening. I don't know what you've changed on your system, because you've been careful not to say. I don't know what is going on in your system, because you're not looking at the debug logs.
Again, the ONLY reason FreeRADIUS assigns an IP is because it thinks that the IP is free. If you're getting duplicate IP assignments, it's because something ELSE in the network isn't telling FreeRADIUS that the IP is still in use.
I've said this repeatedly, and you don't seem to be paying attention.
Is the NAS sending Interim-Update (or Alive) packets? If not, THAT is the source of the problem. Fix it.
For v2.x, read "raddb/sql/mysql/ippool.conf" The comments in that file explain how it works. They explain what the queries do. And when they're run.
If you're going to only look at the *results* of the IP address assignment, you will never know *why* an IP was assigned.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wesley wrote:
Ok here are the logs from: /var/log/radius/radacct/41.76.216.246/detail-20141125
I didn't ask for those logs. I asked *you* specific questions, which you haven't answered. One question in particular is critical to knowing what the source of the problem is. At this point, I have a pretty good idea as to what's wrong. You should have a good idea, too. All of the information is in front of you. If you refuse to look at it, there's nothing more I can do. Alan DeKok.
sorry for any inconvenience like I did say I am not accustomed to exactly how freeradius works & I am trying to figure out how to get you the debug logs for a specific user...if you have a command example it would be appreciated On 2014/11/25 05:58 PM, Alan DeKok wrote:
Wesley wrote:
Ok here are the logs from: /var/log/radius/radacct/41.76.216.246/detail-20141125 I didn't ask for those logs.
I asked *you* specific questions, which you haven't answered. One question in particular is critical to knowing what the source of the problem is.
At this point, I have a pretty good idea as to what's wrong. You should have a good idea, too. All of the information is in front of you. If you refuse to look at it, there's nothing more I can do.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wesley wrote:
sorry for any inconvenience like I did say I am not accustomed to exactly how freeradius works
That's fine. What *isn't* fine is when I ask you a question, and you don't answer it. You: I need help with X. Me: What's happening, A, B, or C? You: I don't know how to solve X Me: What's happening, A, B, or C? You: I can't figure out X Me: good luck. I can't help you.
& I am trying to figure out how to get you the debug logs for a specific user...if you have a command example it would be appreciated
I told you to use raddebug. Is it really that difficult to do: $ raddebug -h You're interesting in *asking* for help. You're not interested in *listening* to help. Alan DeKok.
participants (4)
-
Alan Buxey -
Alan DeKok -
Clive -
Wesley