Traffic accounting problems on freeradius
Hello, I've got a standard configuration of FreeRadius + OpenVPN + IPsec . Everything works good except of traffic accounting for OpenVPN . Some TCP\UDP sessions has no problems with accounting but some has no any data about Acct-Input-Octets and Acct-Output-Octets Example: /var/log/radius/radacct/IP_address/detail-20180719 Thu Jul 19 12:20:08 2018 User-Name = "******@gmail.com" NAS-IP-Address = *********** NAS-Port = 2 Service-Type = Outbound-User Framed-Protocol = PPP Framed-IP-Address = 10.0.3.10 Calling-Station-Id = "***********" NAS-Identifier = "OpenVpn" Acct-Status-Type = Stop Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Session-Id = "40B889944DEC6DA1C2905D0CC5EE9D08" Acct-Session-Time = 32 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 NAS-Port-Type = Virtual Acct-Unique-Session-Id = "6ae1bb07105d7ebb" Timestamp = 1531995608 There are no errors in logs on OpenVPN server and FreeRadius server. Just 50/50 no traffic information come to freeradius server (looks like). Maybe someone have any suggestions what to check and how to fix this problem? I'm ready to provide any logs or configs for further proceedings . Best regards
On Thu, 2018-07-19 at 12:46 +0300, Anton Sapotsko wrote:
There are no errors in logs on OpenVPN server and FreeRadius server. Just 50/50 no traffic information come to freeradius server (looks like).
Maybe someone have any suggestions what to check and how to fix this problem? I'm ready to provide any logs or configs for further proceedings .
FreeRADIUS only sees what it's being sent, so you'll need to ask OpenVPN why they don't always send the data. -- Matthew
Hello Matthew! So you sure that problem 100% from the OpenVPN NAS server side? On Thu, Jul 19, 2018 at 1:11 PM, Matthew Newton <mcn@freeradius.org> wrote:
On Thu, 2018-07-19 at 12:46 +0300, Anton Sapotsko wrote:
There are no errors in logs on OpenVPN server and FreeRadius server. Just 50/50 no traffic information come to freeradius server (looks like).
Maybe someone have any suggestions what to check and how to fix this problem? I'm ready to provide any logs or configs for further proceedings .
FreeRADIUS only sees what it's being sent, so you'll need to ask OpenVPN why they don't always send the data.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Thu, 2018-07-19 at 13:17 +0300, Anton Sapotsko wrote:
So you sure that problem 100% from the OpenVPN NAS server side?
Look at the FreeRADIUS debug output. If it shows those attributes as 0 when the packet comes in, then that's what it's being sent. Unless you've done something really odd with your configuration, the detail log will contain the same values. If you really want to prove it, look at a packet capture (e.g. radsniff). -- Matthew
radsniff shows the same output as an "/var/log/radius/radacct/IP_address/detail-20180719" does . So your words about problems on OpenVPN side has sense . Thank you for your suggestions. Best regards On Thu, Jul 19, 2018 at 1:20 PM, Matthew Newton <mcn@freeradius.org> wrote:
On Thu, 2018-07-19 at 13:17 +0300, Anton Sapotsko wrote:
So you sure that problem 100% from the OpenVPN NAS server side?
Look at the FreeRADIUS debug output. If it shows those attributes as 0 when the packet comes in, then that's what it's being sent.
Unless you've done something really odd with your configuration, the detail log will contain the same values.
If you really want to prove it, look at a packet capture (e.g. radsniff).
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
participants (2)
-
Anton Sapotsko -
Matthew Newton