online users and LNS users are not equal and fluctuating
Dear Sir, I have FreeRADIUS Version 2.2.0, I have 3 Clients (3 LNS Cisco routers) and I am facing problem that online users are not stable in radius. Details: LNS01(Cisco), LNS02(Cisco): handle same users found in freeradiusdb. BUT in radius, LNS03 is not handling same number of users found in LNS03(Cisco). they are fluctuating all time. configuration of cisco LNSs are same. and I don't know from where the problem comes from. note: on LNS03(cisco) the users are stable but the problem in radius online users. please help.
Hi, 1. 2.2.0 ? Update. I don't believe that even devs remember what changes were made and what bugs were fixed since that version. So it's pretty hard to help you I believe. 2. Start FreeRADIUS in debug mode to see, what is happening. Without debug there is nothing to say. 2017-03-21 10:50 GMT+02:00 iQalalwa <iqalalwa@gmail.com>:
Dear Sir, I have FreeRADIUS Version 2.2.0, I have 3 Clients (3 LNS Cisco routers) and I am facing problem that online users are not stable in radius. Details: LNS01(Cisco), LNS02(Cisco): handle same users found in freeradiusdb. BUT in radius, LNS03 is not handling same number of users found in LNS03(Cisco). they are fluctuating all time. configuration of cisco LNSs are same. and I don't know from where the problem comes from. note: on LNS03(cisco) the users are stable but the problem in radius online users. please help. - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Best regards, Roman.
Yes Sir, here is debugging: rad_recv: Accounting-Request packet from host 192.168.75.3 port 1646, id=155, length=361 Acct-Session-Id = "01D42DE6" Tunnel-Type:0 = L2TP Tunnel-Medium-Type:0 = IPv4 Tunnel-Server-Endpoint:0 = "192.168.1.5" Tunnel-Client-Endpoint:0 = "x.x.x.x" Tunnel-Assignment-Id:0 = "xxx" Tunnel-Client-Auth-Id:0 = "232" Tunnel-Server-Auth-Id:0 = "LNS03" Acct-Tunnel-Connection = "75515834" Cisco-Policy-Up = "5122" Cisco-Policy-Down = "40" Framed-Protocol = PPP Framed-IP-Address = 10.10.10.54 User-Name = "iyad@xdomain" Cisco-AVPair = "connect-progress=LAN Ses Up" Acct-Authentic = RADIUS Acct-Status-Type = Start Cisco-AVPair = "circuit-id-tag=10.10.45.99#1#5#48" Calling-Station-Id = "X00001 1/2/2:1853.151" Connect-Info = "4294967295" NAS-Port-Type = Virtual NAS-Port = 6722 NAS-Port-Id = "Uniq-Sess-ID6722" Service-Type = Framed-User NAS-IP-Address = 192.168.75.3 X-Ascend-Session-Svr-Key = "BFD903E6" Acct-Delay-Time = 0 # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Identifier was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing 'NAS-Port = 6722,,NAS-IP-Address = 192.168.75.3,Acct-Session-Id = "01D42DE6",User-Name = "iyad@xdomain"' [acct_unique] Acct-Unique-Session-ID = "208f7c7fd9519972". ++[acct_unique] returns ok [suffix] Looking up realm "xdomain" for User-Name = "iyad@xdomain" [suffix] No such realm "xdomain" ++[suffix] returns noop [files] acct_users: Matched entry DEFAULT at line 25 [files] expand: /usr/local/bin/rmacnt start %{Acct-Unique-Session-Id} -> /usr/local/bin/rmacnt start 208f7c7fd9519972 ++[files] returns ok # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default +- entering group accounting {...} rlm_sql (sql): Reserving sql socket id: 2 [sqlippool] expand: %{User-Name} -> iyad@xdomain [sqlippool] sql_set_user escaped user --> 'iyad@xdomain' [sqlippool] expand: START TRANSACTION -> START TRANSACTION [sqlippool] expand: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}' -> UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '192.168.75.3' AND pool_key = '6722' AND username = 'iyad@xdomain' AND callingstationid = 'X00001 1/2/2:1853.151' AND framedipaddress = '10.10.10.54' [sqlippool] expand: COMMIT -> COMMIT rlm_sql (sql): Released sql socket id: 2 ++[sqlippool] returns ok [sql] expand: %{User-Name} -> iyad@xdomain [sql] sql_set_user escaped user --> 'iyad@xdomain' [sql] expand: %{Acct-Delay-Time} -> 0 [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 ++[sql] returns ok ++[exec] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> iyad@xdomain attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 155 to 192.168.75.3 port 1646 Finished request 3020. Cleaning up request 3020 ID 155 with timestamp +64 Going to the next request On Tue, Mar 21, 2017 at 10:58 AM, Roman <romeo.r@gmail.com> wrote:
Hi,
1. 2.2.0 ? Update. I don't believe that even devs remember what changes were made and what bugs were fixed since that version. So it's pretty hard to help you I believe. 2. Start FreeRADIUS in debug mode to see, what is happening. Without debug there is nothing to say.
2017-03-21 10:50 GMT+02:00 iQalalwa <iqalalwa@gmail.com>:
Dear Sir, I have FreeRADIUS Version 2.2.0, I have 3 Clients (3 LNS Cisco routers) and I am facing problem that online users are not stable in radius. Details: LNS01(Cisco), LNS02(Cisco): handle same users found in freeradiusdb. BUT in radius, LNS03 is not handling same number of users found in LNS03(Cisco). they are fluctuating all time. configuration of cisco LNSs are same. and I don't know from where the problem comes from. note: on LNS03(cisco) the users are stable but the problem in radius online users. please help. - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Best regards, Roman. - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Mar 21, 2017, at 4:50 AM, iQalalwa <iqalalwa@gmail.com> wrote:
Dear Sir, I have FreeRADIUS Version 2.2.0,
You should upgrade.
I have 3 Clients (3 LNS Cisco routers) and I am facing problem that online users are not stable in radius. Details:
What does that mean?
LNS01(Cisco), LNS02(Cisco): handle same users found in freeradiusdb. BUT in radius, LNS03 is not handling same number of users found in LNS03(Cisco). they are fluctuating all time. configuration of cisco LNSs are same. and I don't know from where the problem comes from. note: on LNS03(cisco) the users are stable but the problem in radius online users.
RADIUS accounting packets can be lost. There is no way to *guarantee* that the information in the "radacct" table is exactly the same as what is in the NAS. And if the two disagree, the usual cause is that the NAS is lying to the RADIUS server. Alan DeKok.
participants (3)
-
Alan DeKok -
iQalalwa -
Roman