Help Accounting packet forwarding
hi, i'm just a newbie in freeradiu. can i get help about how to do a accounting packet forwarding. i need to setup netsweeper application, it says that this need accounting packet forwarding, and also about add avp at that accounting data. any tutorial can be shared ? thanks. Regards, Franky Yustanto
Hi,
i'm just a newbie in freeradiu. can i get help about how to do a accounting packet forwarding. i need to setup netsweeper application, it says that this need accounting packet forwarding, and also about add avp at that accounting data. any tutorial can be shared ?
use one of the provided accounting virtual servers - eg copy-acct-to-home-server (documentation is in the config) alan
hi alan, thanks, but i just wondering .... what does means home-server ? is it my radiusd server or another radiusdserver ? thanks. On Fri, Jan 24, 2014 at 5:30 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
i'm just a newbie in freeradiu. can i get help about how to do a accounting packet forwarding. i need to setup netsweeper application, it says that this need accounting packet forwarding, and also about add avp at that accounting data. any tutorial can be shared ?
use one of the provided accounting virtual servers - eg copy-acct-to-home-server (documentation is in the config)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 24 Jan 2014, at 10:43, battossai <battossai@gmail.com> wrote:
hi alan,
thanks, but i just wondering .... what does means home-server ? is it my radiusd server or another radiusdserver ?
Another server. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Hi arran, So i don't edit proxy.conf right ? Can you a short meaning of a realm ? Thanks, Regards, Franky Yustanto On Friday, January 24, 2014, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 24 Jan 2014, at 10:43, battossai <battossai@gmail.com <javascript:;>> wrote:
hi alan,
thanks, but i just wondering .... what does means home-server ? is it my radiusd server or another radiusdserver ?
Another server.
Arran Cudbard-Bell <a.cudbardb@freeradius.org <javascript:;>> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
hi, this debug log below, is it means that is working ? *Proxying request 1 to home server 103.247.122.210 port 1813* *Sending Accounting-Request of id 105 to 103.247.122.210 port 1813* * Service-Type = Framed-User* * Framed-Protocol = PPP* * NAS-Port = 417051* * NAS-Port-Type = Ethernet* * User-Name = "ultimate_dhanz"* * Calling-Station-Id = "D4:CA:6D:9E:46:AF"* * Called-Station-Id = "PPPoE.Service.Vlan25"* * NAS-Port-Id = "vlan25"* * MS-CHAP-Domain = "yahoo.com <http://yahoo.com>"* * Acct-Session-Id = "81b0003f"* * Framed-IP-Address = 103.247.123.4* * Acct-Authentic = RADIUS* * Event-Timestamp = "Jan 24 2014 21:19:54 WIT"* * Acct-Session-Time = 248700* * Acct-Input-Octets = 237148671* * Acct-Input-Gigawords = 0* * Acct-Input-Packets = 1639185* * Acct-Output-Octets = 1538150698* * Acct-Output-Gigawords = 0* * Acct-Output-Packets = 1880782* * Acct-Status-Type = Interim-Update* * NAS-Identifier = "DR2.SMG"* * Acct-Delay-Time = 0* * Mikrotik-Realm = "yahoo.com <http://yahoo.com>"* * NAS-IP-Address = 103.247.123.158* * Proxy-State = 0x3438* *Going to the next request* *Waking up in 0.3 seconds.* *rad_recv: Accounting-Response packet from host 103.247.122.210 port 1813, id=105, length=24* * Proxy-State = 0x3438* *+- entering group post-proxy {...}* *[eap] No pre-existing handler found* *++[eap] returns noop* *Sending Accounting-Response of id 48 to 103.247.123.158 port 60060* *Finished request 1.* *Cleaning up request 1 ID 48 with timestamp +52* *Going to the next request* thanks. On Fri, Jan 24, 2014 at 8:58 PM, Alan DeKok <aland@deployingradius.com>wrote:
battossai wrote:
So i don't edit proxy.conf right ?
For proxying, you usually edit proxy.conf.
Can you a short meaning of a realm ?
Read proxy.conf. This is documented.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 24 Jan 2014, at 14:22, battossai <battossai@gmail.com> wrote:
hi,
this debug log below, is it means that is working ?
Yes. and I misread your previous question, you do edit proxy.conf Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
hi all, is it correct that my accounting forward is worked ? how to see this accounting forward packet is working by a log file ? right now i starting radius in daemon mode, could not see anything log regarding accounting forward on /var/log/radius/radius.log thanks. regards, Franky Yustanto On Sat, Jan 25, 2014 at 1:18 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 24 Jan 2014, at 14:22, battossai <battossai@gmail.com> wrote:
hi,
this debug log below, is it means that is working ?
Yes. and I misread your previous question, you do edit proxy.conf
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
battossai wrote:
is it correct that my accounting forward is worked ?
What does the debug log say? You can learn, and figure it out for yourself. Or, you can ask questions every 15 minutes. It's up to you.
how to see this accounting forward packet is working by a log file ?
No.
right now i starting radius in daemon mode, could not see anything log regarding accounting forward on /var/log/radius/radius.log
Exactly. That's what the debug output is for. See "man raddebug". Alan DeKok.
hi, still don't know how to knew that this is worked. i'm using freeradius for pptp system with mikrotik. right now i like to add some atribute in accounting packet, let say class atribute, who to do this ? from that i like to forward this accounting data into another freeradius server, in this case netsweeper radius server. can give me info how to insert a atribute / avp ? sorry if this to basic for all of you, i'm completely fresh beginer for freeradius. thanks. On Sat, Jan 25, 2014 at 9:09 PM, Alan DeKok <aland@deployingradius.com>wrote:
battossai wrote:
is it correct that my accounting forward is worked ?
What does the debug log say?
You can learn, and figure it out for yourself. Or, you can ask questions every 15 minutes. It's up to you.
how to see this accounting forward packet is working by a log file ?
No.
right now i starting radius in daemon mode, could not see anything log regarding accounting forward on /var/log/radius/radius.log
Exactly.
That's what the debug output is for. See "man raddebug".
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi I'd suggest that you start by reading the available documentation... and maybe buy a book. You'll know that it is working by looking at the debug output of freeradius .. and hopefully the debug/logs/interface of your NAS. Then if there are still issues you ask questions relevant to the issue. Alan
Hi all, Still could not get "Class" Attribute in my accounting data. Should be defining it from "acct_users" right ? Or shoul NAS asked that "Class" Attrribute ? *rad_recv: Accounting-Request packet from host 103.247.123.158 port 40101, id=170, length=253* *Service-Type = Framed-User* *Framed-Protocol = PPP* *NAS-Port = 420725* *NAS-Port-Type = Ethernet* *User-Name = "franky@yustanto.com <franky@yustanto.com>"* *Calling-Station-Id = "D4:CA:6D:D8:92:78"* *Called-Station-Id = "PPPoE.Service.Vlan100"* *NAS-Port-Id = "vlan100"* *MS-CHAP-Domain = "yustanto.com <http://yustanto.com>"* *Acct-Session-Id = "81b00e94"* *Framed-IP-Address = 103.247.123.47* *Acct-Authentic = RADIUS* *Event-Timestamp = "Jan 29 2014 11:24:05 WIT"* *Acct-Session-Time = 1800* *Acct-Input-Octets = 710* *Acct-Input-Gigawords = 0* *Acct-Input-Packets = 21* *Acct-Output-Octets = 722* *Acct-Output-Gigawords = 0* *Acct-Output-Packets = 21* *Acct-Status-Type = Interim-Update* *NAS-Identifier = "DR2.SMG"* *Acct-Delay-Time = 0* *Mikrotik-Realm = "yustanto.com <http://yustanto.com>"* *NAS-IP-Address = 103.247.123.158* *+- entering group preacct {...}* Have been google it, and still can find out, please help give a clue. I'm desperate ... Thanks On Sun, Jan 26, 2014 at 8:05 PM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi
I'd suggest that you start by reading the available documentation... and maybe buy a book. You'll know that it is working by looking at the debug output of freeradius .. and hopefully the debug/logs/interface of your NAS. Then if there are still issues you ask questions relevant to the issue.
Alan
On 29 Jan 2014, at 04:36, battossai <battossai@gmail.com> wrote:
Hi all,
Still could not get "Class" Attribute in my accounting data. Should be defining it from "acct_users" right ?
No. You define it in the Access-Accept. Post-Auth { update reply { Class := 0x00112244 } } Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Hi, Is it this "class" attribute have to request first from NAS ? Or i just give that attribute to NAS ? I think it still not working, i do have add that example on post-auth on site-enabled/default. I try this on radiusmanager system with pppoe nas using mikrotik. Or perhaps this example need to inject to radacct table ? Still don't understand it. Any help will be welcome. Thanks. Regards, Franky Yustanto On Wednesday, January 29, 2014, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 29 Jan 2014, at 04:36, battossai <battossai@gmail.com <javascript:;>> wrote:
Hi all,
Still could not get "Class" Attribute in my accounting data. Should be defining it from "acct_users" right ?
No. You define it in the Access-Accept.
Post-Auth { update reply { Class := 0x00112244 } }
Arran Cudbard-Bell <a.cudbardb@freeradius.org <javascript:;>> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
battossai wrote:
Is it this "class" attribute have to request first from NAS ? Or i just give that attribute to NAS ?
If you don't know what Class is for, you don't need to use it.
I think it still not working, i do have add that example on post-auth on site-enabled/default.
It would help to understand how the server works. Read the comments in that file to see how it works.
I try this on radiusmanager system with pppoe nas using mikrotik. Or perhaps this example need to inject to radacct table ?
No.
Still don't understand it.
You're trying to do something with the Class attribute. The problem is you don't know what Class is for. You don't know how the server works. You don't know what the configuration files do. You're asking the wrong questions. When you ask for help using Class, we presume that you have some understanding of what it does. When you don't have that understanding, it means you can't understand the answers. Perhaps you could explain what problem you're trying to solve. Use simple words. Don't talk about the solution you have, because it's wrong. Talk about what you have, and what you want to see. Alan DeKok.
hi Alan, sorry for this missunderstanding, surely in the begining i am saying is complete new beginer in freeradius. what i have to search is something like this : - I have pppoe network using mikrotik as nas with radiusmanager frontend which is using freeradius mysql as backend. - in this time, i'm trial a new filtering system called netsweeper. - for user change their own policy, netsweeper need accounting packet from my freeradius.therefore some attribute this netsweeper needs, which is "Class" "User-Name" "Client-Ip-Address" . - this accounting packet attribute need to be sent into netsweeper freeradius system, from there this netsweeper marking detail.log in their system with php, so this attribute become parameter to enter their system. This the basic needs that i like to implement in my system. Perhaps you and this mailing list can give me a favor. Thanks. Regards, Franky Yustanto On Wed, Jan 29, 2014 at 10:31 PM, Alan DeKok <aland@deployingradius.com>wrote:
battossai wrote:
Is it this "class" attribute have to request first from NAS ? Or i just give that attribute to NAS ?
If you don't know what Class is for, you don't need to use it.
I think it still not working, i do have add that example on post-auth on site-enabled/default.
It would help to understand how the server works. Read the comments in that file to see how it works.
I try this on radiusmanager system with pppoe nas using mikrotik. Or perhaps this example need to inject to radacct table ?
No.
Still don't understand it.
You're trying to do something with the Class attribute. The problem is you don't know what Class is for. You don't know how the server works. You don't know what the configuration files do.
You're asking the wrong questions. When you ask for help using Class, we presume that you have some understanding of what it does. When you don't have that understanding, it means you can't understand the answers.
Perhaps you could explain what problem you're trying to solve. Use simple words. Don't talk about the solution you have, because it's wrong. Talk about what you have, and what you want to see.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
battossai wrote:
sorry for this missunderstanding, surely in the begining i am saying is complete new beginer in freeradius.
That's fine. What you're missing is that you should work to understand the system.
what i have to search is something like this :
* I have pppoe network using mikrotik as nas with radiusmanager frontend which is using freeradius mysql as backend. * in this time, i'm trial a new filtering system called netsweeper.
OK.
* for user change their own policy, netsweeper need accounting packet from my freeradius.therefore some attribute this netsweeper needs, which is "Class" "User-Name" "Client-Ip-Address" .
Why does it need Class? What value is needed for Class?
* this accounting packet attribute need to be sent into netsweeper freeradius system, from there this netsweeper marking detail.log in their system with php, so this attribute become parameter to enter their system.
Configure FreeRADIUS to return a Class attribute in the Access-Accept. The NAS *should* return it in the Accounting-Request. Alan DeKok.
On Thu, Jan 30, 2014 at 8:19 PM, Alan DeKok <aland@deployingradius.com>wrote:
Why does it need Class? What value is needed for Class?
* this accounting packet attribute need to be sent into netsweeper freeradius system, from there this netsweeper marking detail.log in their system with php, so this attribute become parameter to enter their system.
Configure FreeRADIUS to return a Class attribute in the Access-Accept. The NAS *should* return it in the Accounting-Request.
Alan DeKok.
Hi Alan, I think moderator refused my attachment screen shot. Basicly this netsweeper need "Class" attribute that will be becoming as group name in their database. So i assume it the value exampe is like "group01" "group02" Is it this is can be done ? Thanks. Regards, Franky Yustanto
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
battossai wrote:
Basicly this netsweeper need "Class" attribute that will be becoming as group name in their database. So i assume it the value exampe is like "group01" "group02"
I have no idea. That's not the usual use of Class. Ask netsweeper for more information.
Is it this is can be done ?
Yes... as I said. An earlier reply to you said exactly how to do this. Alan DeKok.
Hi Alan, As from i read, "class" attribute was a cookie that send from radiusd right ? Forget first what value of that class, if you like give me how to make this class is come up in accounting packet. Give one example that worked. I'm looking for accept-accept response, and still could not find it. Thank you for all your support. Regards, Franky Yustanto On Saturday, February 1, 2014, Alan DeKok <aland@deployingradius.com> wrote:
battossai wrote:
Basicly this netsweeper need "Class" attribute that will be becoming as group name in their database. So i assume it the value exampe is like "group01" "group02"
I have no idea. That's not the usual use of Class. Ask netsweeper for more information.
Is it this is can be done ?
Yes... as I said. An earlier reply to you said exactly how to do this.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
battossai wrote:
As from i read, "class" attribute was a cookie that send from radiusd right ?
Yes.
Forget first what value of that class, if you like give me how to make this class is come up in accounting packet. Give one example that worked.
You were told already. If you're not going to read the responses on this list, you shouldn't be asking here.
I'm looking for accept-accept response, and still could not find it. Thank you for all your support.
You need to pay attention, and to do some more work yourself. Repeatedly asking the same questions on the list is rude. http://lists.freeradius.org/pipermail/freeradius-users/2014-January/070117.h... Alan DeKok.
Dear Alan, I do not want mean to be rude, i just need help, sorry. Previously i have tried to write arran example into site-enabled/default. No result i think Even i tried to inject into radcheck database with class := 0x11223344, this does not work too. But when i use ntradping and add that class attribute with group01, it show on log. This is make me confused, this class should be asked from mikrotik (nas) or radiusd automaticly give that attribute ? Please therad me like an idiot on this, because i don't have a clue at all. Thank you. Regards, Franky Yustanto On Sunday, February 2, 2014, Alan DeKok <aland@deployingradius.com> wrote:
battossai wrote:
As from i read, "class" attribute was a cookie that send from radiusd right ?
Yes.
Forget first what value of that class, if you like give me how to make this class is come up in accounting packet. Give one example that worked.
You were told already. If you're not going to read the responses on this list, you shouldn't be asking here.
I'm looking for accept-accept response, and still could not find it. Thank you for all your support.
You need to pay attention, and to do some more work yourself. Repeatedly asking the same questions on the list is rude.
http://lists.freeradius.org/pipermail/freeradius-users/2014-January/070117.h...
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
battossai wrote:
I do not want mean to be rude, i just need help, sorry. Previously i have tried to write arran example into site-enabled/default. No result i think
Nonsense. You need to READ THE DEBUG OUTPUT. This is said pretty much every day on this list.
Even i tried to inject into radcheck database with class := 0x11223344, this does not work too.
See the FAQ for "it doesn't work". That is a useless comment.
But when i use ntradping and add that class attribute with group01, it show on log.
Yes, I know.
This is make me confused, this class should be asked from mikrotik (nas) or radiusd automaticly give that attribute ?
As you were told, Class is sent in Access-Accept. The NAS then is supposed to echo it back in the Accounting-Request.
Please therad me like an idiot on this, because i don't have a clue at all.
It's OK to not know about RADIUS. It's not OK to learn. Please stop asking questions until you've followed instructions. You've been given instructions for how to get this to work. You've been given instructions for debugging issues. If you're not going to follow instructions, you have no business asking questions on this list. I for one am not going to respond to any more of your questions. It's clear I'm wasting my time. I'm trying to help you, you're not willing to do *anything* useful to help yourself. Alan DeKok.
Dear Alan, Thank you for all your help, and i'm aplogizing for how stupid and idiot i am. Your last info about echoing is make me understand right now. here is that i've got thanks to you and all of this list member : Sun Feb 2 23:45:49 2014 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 421056 NAS-Port-Type = Ethernet User-Name = "franky@yustanto.com" Calling-Station-Id = "D4:CA:6D:D8:92:78" Called-Station-Id = "PPPoE.Service.Vlan100" NAS-Port-Id = "vlan100" MS-CHAP-Domain = "yustanto.com" Class = 0x67726f75703031 Acct-Session-Id = "81b00fdf" Framed-IP-Address = 103.247.123.47 Acct-Authentic = RADIUS Event-Timestamp = "Feb 2 2014 23:45:49 WIT" Acct-Status-Type = Start NAS-Identifier = "DR2.SMG" Acct-Delay-Time = 0 Mikrotik-Realm = "yustanto.com" NAS-IP-Address = 103.247.123.158 Acct-Unique-Session-Id = "1ec8bf10f35d8e49" Stripped-User-Name = "franky" Realm = "DEFAULT" Timestamp = 1391359549 Request-Authenticator = Verified Right now i'm will googling about change that value into human readable. many many thanks all of you. Regards, Franky Yustanto On Sun, Feb 2, 2014 at 10:35 PM, Alan DeKok <aland@deployingradius.com>wrote:
battossai wrote:
I do not want mean to be rude, i just need help, sorry. Previously i have tried to write arran example into site-enabled/default. No result i think
Nonsense. You need to READ THE DEBUG OUTPUT. This is said pretty much every day on this list.
Even i tried to inject into radcheck database with class := 0x11223344, this does not work too.
See the FAQ for "it doesn't work". That is a useless comment.
But when i use ntradping and add that class attribute with group01, it show on log.
Yes, I know.
This is make me confused, this class should be asked from mikrotik (nas) or radiusd automaticly give that attribute ?
As you were told, Class is sent in Access-Accept. The NAS then is supposed to echo it back in the Accounting-Request.
Please therad me like an idiot on this, because i don't have a clue at all.
It's OK to not know about RADIUS. It's not OK to learn.
Please stop asking questions until you've followed instructions.
You've been given instructions for how to get this to work. You've been given instructions for debugging issues.
If you're not going to follow instructions, you have no business asking questions on this list.
I for one am not going to respond to any more of your questions. It's clear I'm wasting my time. I'm trying to help you, you're not willing to do *anything* useful to help yourself.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
hi all, i have try it, what is the sign that this configuration is working ? thanks regards, Franky Yustanto On Fri, Jan 24, 2014 at 7:28 PM, battossai <battossai@gmail.com> wrote:
Hi arran,
So i don't edit proxy.conf right ? Can you a short meaning of a realm ?
Thanks,
Regards, Franky Yustanto
On Friday, January 24, 2014, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 24 Jan 2014, at 10:43, battossai <battossai@gmail.com> wrote:
hi alan,
thanks, but i just wondering .... what does means home-server ? is it my radiusd server or another radiusdserver ?
Another server.
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan Buxey
-
Alan DeKok -
Arran Cudbard-Bell -
battossai