radius user disconnection and same account multiplication problem in radacct

Tue Jul 8 10:27:08 CEST 2008

A new doubt. Is there anyway to safe disconnet an user from the radius server, in a way that it auto disconnects him from the nas (a pppoe server)? And about that Packet of Disconnect, is it still working?

I forgot to cite the version I'm using, and considering the message was sent on weekend, with less chance of reading, I'm replying it. If I'm doing wrong, I apologize, but I still trust in your experience to provide me with some ideas.
I'm using all the last stuff (Freeradius 2.0.3) from the ports repository on a FreeBSD 6.3.
The server is an ISP in production and we have to restart the connection suit (pppoe, radius, firewall) everytime some account starts to multiply itself, so the users that are multiplying can log in again, and not receive the message 'Still logged in' . 
I'll be realy grateful for any reply.
Thanks Again. 

>Hi again, I solved the last trouble with ippool.db using the sqlippool instead.
>But I got a new shining problem. :)
>Now, almost everything seems to be working fine. Almost, cause I have some account >multiplication in the radacct table. Only a few users are doing that. And the multiplication >doesn't stop while the users remain logged on. Only a few appear in table, I'm using an unique >index with acctstarttime and nasipaddress. And the numbers of radacctid jump a lot (from 1400 >to 4000, for example).
>I'm using also the set rad_alive 40 in ppp.conf and in the radiusd.conf, cleanup_delay 8 and >max_request_time 50. All that with chap authentication.

>Select on one of the users who get the problem:

+-----------+----------------------------------+--------------+--------------------+-----------+-------+----------------+-------
----+-------------+---------------------+--------------+-----------------+---------------+-------------------+------------------
+-----------------+------------------+-----------------+------------------+--------------------+-------------+----------------+-
----------------+----------------+---------------+----------------------+
| radacctid | acctsessionid | acctuniqueid | username | groupname | realm | nasipaddress | naspor
tid | nasporttype | acctstarttime | acctstoptime | acctsessiontime | acctauthentic | connectinfo_start | connectinfo_stop
| acctinputoctets | acctoutputoctets | calledstationid | callingstationid | acctterminatecause | servicetype | framedprotocol |
framedipaddress | acctstartdelay | acctstopdelay | xascendsessionsvrkey |
+-----------+----------------------------------+--------------+--------------------+-----------+-------+----------------+-------
----+-------------+---------------------+--------------+-----------------+---------------+-------------------+------------------
+-----------------+------------------+-----------------+------------------+--------------------+-------------+----------------+-
----------------+----------------+---------------+----------------------+
| 14419 | 37142-user212151719 | | user2 | | | XXX.XXX.XXX.252 | 688
| Ethernet | 2008-07-04 08:46:31 | NULL | 0 | | |
| 0 | 0 | | X | | Framed-User | PPP |
XXX.XXX.XXX.182 | 0 | 0 | |
| 14421 | 37142-user212151719 | | user2 | | | XXX.XXX.XXX.252 | 688
| Ethernet | 2008-07-04 08:46:34 | NULL | 40 | | | NULL
| 31795 | 102873 | | X | | Framed-User | PPP |
XXX.XXX.XXX.182 | 0 | NULL | |
| 14424 | 37142-user212151719 | | user2 | | | XXX.XXX.XXX.252 | 688
| Ethernet | 2008-07-04 08:46:37 | NULL | 80 | | | NULL
| 59226 | 215383 | | X | | Framed-User | PPP |
XXX.XXX.XXX.182 | 0 | NULL | |
+-----------+----------------------------------+--------------+--------------------+-----------+-------+----------------+-------
----+-------------+---------------------+--------------+-----------------+---------------+-------------------+------------------
+-----------------+------------------+-----------------+------------------+--------------------+-------------+----------------+-
----------------+----------------+---------------+----------------------+

>Radius log exact when the problem starts:

74242 Fri Jul 4 03:40:25 2008 : Info: Ready to process requests.
74243 Fri Jul 4 03:41:02 2008 : Info: Allocated IP: XXX.XXX.XXX.121 from valid (did cli 0 port 678 user x)
74244 Fri Jul 4 03:41:10 2008 : Info: Allocated IP: XXX.XXX.XXX.179 from valid (did cli 0 port 679 user x)
74245 Fri Jul 4 04:40:00 2008 : Info: Allocated IP: XXX.XXX.XXX.186 from valid (did cli 0 port 680 user x)
74246 Fri Jul 4 06:37:33 2008 : Info: Allocated IP: XXX.XXX.XXX.67 from valid (did cli 0 port 681 user x)
74247 Fri Jul 4 06:57:05 2008 : Info: Released IP XXX.XXX.XXX.67 (did cli 0 user x)
74248 Fri Jul 4 07:01:50 2008 : Info: Allocated IP: XXX.XXX.XXX.153 from valid (did cli 0 port 682 user x)
74249 Fri Jul 4 07:07:34 2008 : Info: Allocated IP: XXX.XXX.XXX.105 from valid (did cli 0 port 683 user x)
74250 Fri Jul 4 07:29:44 2008 : Info: Released IP XXX.XXX.XXX.186 (did cli 0 user x)
74251 Fri Jul 4 07:33:22 2008 : Info: Allocated IP: XXX.XXX.XXX.141 from valid (did cli 0 port 684 user x)
74252 Fri Jul 4 08:06:53 2008 : Info: Allocated IP: XXX.XXX.XXX.133 from valid (did cli 0 port 685 user x)
74253 Fri Jul 4 08:07:54 2008 : Info: Allocated IP: XXX.XXX.XXX.139 from valid (did cli 0 port 686 user x)
74254 Fri Jul 4 08:34:12 2008 : Info: Allocated IP: XXX.XXX.XXX.173 from valid (did cli 0 port 687 user x)
74255 Fri Jul 4 08:35:02 2008 : Info: Released IP XXX.XXX.XXX.133 (did cli 0 user x)
74256 Fri Jul 4 08:46:31 2008 : Info: Allocated IP: XXX.XXX.XXX.182 from valid (did cli 0 port 688 user user2)
74257 Fri Jul 4 08:47:11 2008 : Error: rlm_sql (sql): Couldn't insert SQL accounting ALIVE record - Duplicate entry '2008-07-0
08:46:31-XXX.XXX.XXX.252' for key 'radacct_whoson'
74258 Fri Jul 4 08:47:11 2008 : Error: rlm_sql_mysql: Cannot store result
74259 Fri Jul 4 08:47:11 2008 : Error: rlm_sql_mysql: MySQL error 'Duplicate entry '2008-07-04 08:46:31-XXX.XXX.XXX.252' for ke
'radacct_whoson''
74260 Fri Jul 4 08:47:11 2008 : Error: rlm_sql_mysql: Cannot store result
74261 Fri Jul 4 08:47:11 2008 : Error: rlm_sql_mysql: MySQL error 'Duplicate entry '2008-07-04 08:46:31-XXX.XXX.XXX.252' for ke
'radacct_whoson''
74262 Fri Jul 4 08:47:51 2008 : Error: rlm_sql (sql): Couldn't insert SQL accounting ALIVE record - Duplicate entry '2008-07-0
08:46:31-XXX.XXX.XXX.252' for key 'radacct_whoson'
74263 Fri Jul 4 08:47:51 2008 : Error: rlm_sql_mysql: Cannot store result

>And a tcpdump:

Accounting Response (5), id: 0xb5, Authenticator: 3cffa31d3a8dd380caf25ceb110aca6c
08:46:27.957730 IP (tos 0x0, ttl 64, id 34131, offset 0, flags [none], proto: UDP (17), length: 239) XXX.XXX.XXX.129.62577 > XXX
XXX.XXX.XXX.129.1813: RADIUS, length: 211
Accounting Request (4), id: 0xce, Authenticator: 886040c74f1443cacfbed17841589bd9
Username Attribute (1), length: 14, Value: user1
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.141
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius]
0x0000: X [|radius]
08:46:27.962438 IP (tos 0x0, ttl 64, id 34132, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.62577: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0xce, Authenticator: ffaf38da2a70212e3ce78afd032a525e
08:46:31.454218 IP (tos 0x0, ttl 64, id 34133, offset 0, flags [none], proto: UDP (17), length: 183) XXX.XXX.XXX.129.58869 > XXX
.4XXX.XXX.129.1812: RADIUS, length: 155
Access Request (1), id: 0x1d, Authenticator: e44b21c5e2e38c76f6a119d317a157f5
Username Attribute (1), length: 20, Value: user2
0x0000: X
0x0010: 6e6f
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
CHAP Password Attribute (3), length: 19, Value:
0x0000: X [|radius]
08:46:31.459805 IP (tos 0x0, ttl 64, id 34134, offset 0, flags [none], proto: UDP (17), length: 63) XXX.XXX.XXX.129.1812 > XXX.
XXX.XXX.129.58869: [udp sum ok] RADIUS, length: 35
Access Accept (2), id: 0x1d, Authenticator: c824b98efd857da27fa51a00998c3524
Filter ID Attribute (11), length: 9, Value: d256u96
0x0000: 6432 3536 7539 36
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.182
0x0000: X
08:46:31.482694 IP (tos 0x0, ttl 64, id 34135, offset 0, flags [none], proto: UDP (17), length: 208) XXX.XXX.XXX.129.60184 > XXX
.XXX.XXX.129.1813: RADIUS, length: 180
Accounting Request (4), id: 0xc0, Authenticator: 0b59529ee5d6890d7c8800178b3566de
Username Attribute (1), length: 20, Value: user2
0x0000: X
0x0010: 6e6f
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.182
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000 [|radius]
08:46:31.487710 IP (tos 0x0, ttl 64, id 34136, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.60184: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0xc0, Authenticator: 399a20995afe01833bba61fb036795cf
08:46:34.244683 IP (tos 0x0, ttl 64, id 34143, offset 0, flags [none], proto: UDP (17), length: 72) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 46949+ A? dnl-us7.kaspersky-labs.com. (44)
08:46:34.244836 IP (tos 0x0, ttl 64, id 34144, offset 0, flags [none], proto: UDP (17), length: 88) XXX.XXX.XXX.129.53 > XXX.8.
244.129.50747: [udp sum ok] 46949 q: A? dnl-us7.kaspersky-labs.com. 1/0/0 dnl-us7.kaspersky-labs.com. A 195.200.84.5 (60)
08:46:34.955698 IP (tos 0x0, ttl 64, id 34154, offset 0, flags [none], proto: UDP (17), length: 64) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 249+ A? www.aresgalaxy.org. (36)
08:46:34.955849 IP (tos 0x0, ttl 64, id 34155, offset 0, flags [none], proto: UDP (17), length: 80) XXX.XXX.XXX.129.53 > XXX.8.
244.129.50747: [udp sum ok] 249 q: A? www.aresgalaxy.org. 1/0/0 www.aresgalaxy.org. A 66.98.222.3 (52)
08:46:48.279695 IP (tos 0x0, ttl 64, id 34183, offset 0, flags [none], proto: UDP (17), length: 247) XXX.XXX.XXX.129.55465 > XXX
.XXX.XXX.129.1813: RADIUS, length: 219
Accounting Request (4), id: 0x8f, Authenticator: 12a34e1ff6be327bea5bf73a03a635af
Username Attribute (1), length: 18, Value: user1
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.139
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius] [|radius]
08:46:48.284459 IP (tos 0x0, ttl 64, id 34184, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.55465: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0x8f, Authenticator: 2f2339fd34188a81f2d0a707623d217f
08:46:48.446680 IP (tos 0x0, ttl 64, id 34187, offset 0, flags [none], proto: UDP (17), length: 61) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 14077+ A? lan.startvg.com. (33)
08:46:48.446823 IP (tos 0x0, ttl 64, id 34188, offset 0, flags [none], proto: UDP (17), length: 77) XXX.XXX.XXX.129.53 > XXX.8.
244.129.50747: [udp sum ok] 14077 q: A? lan.startvg.com. 1/0/0 lan.startvg.com. A 74.55.200.146 (49)
08:46:49.446681 IP (tos 0x0, ttl 64, id 34200, offset 0, flags [none], proto: UDP (17), length: 60) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 12455+ A? w5.startvg.com. (32)
08:46:49.446865 IP (tos 0x0, ttl 64, id 34201, offset 0, flags [none], proto: UDP (17), length: 76) XXX.XXX.XXX.129.53 > XXX.8.
244.129.50747: [udp sum ok] 12455 q: A? w5.startvg.com. 1/0/0 w5.startvg.com. A 70.85.138.50 (48)
08:46:49.786702 IP (tos 0x0, ttl 64, id 34206, offset 0, flags [none], proto: UDP (17), length: 239) XXX.XXX.XXX.129.51839 > XXX
.XXX.XXX.129.1813: RADIUS, length: 211
Accounting Request (4), id: 0xb4, Authenticator: 3c8be7fa69dbb6607353d2ee04ab65f6
Username Attribute (1), length: 14, Value: user3
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.105
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius]
0x0000: X [|radius]
08:46:49.791404 IP (tos 0x0, ttl 64, id 34207, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.51839: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0xb4, Authenticator: 2da35067aa3748f5f755e398f15b4139
08:46:50.629687 IP (tos 0x0, ttl 64, id 34234, offset 0, flags [none], proto: UDP (17), length: 63) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 20104+ A? www.google.com.br. (35)
08:46:50.629850 IP (tos 0x0, ttl 64, id 34235, offset 0, flags [none], proto: UDP (17), length: 159) XXX.XXX.XXX.129.53 > XXX.8
.244.129.50747: 20104 q: A? www.google.com.br. 5/0/0 www.google.com.br. CNAME www.google.com., [|domain]
08:46:50.874678 IP (tos 0x0, ttl 64, id 34249, offset 0, flags [none], proto: UDP (17), length: 75) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 38539+ A? pagead2.googlesyndication.com. (47)
08:46:50.874849 IP (tos 0x0, ttl 64, id 34250, offset 0, flags [none], proto: UDP (17), length: 153) XXX.XXX.XXX.129.53 > XXX.8
.244.129.50747: 38539 q: A? pagead2.googlesyndication.com. 4/0/0 pagead2.googlesyndication.com. CNAME[|domain]
08:46:52.001649 IP (tos 0x0, ttl 64, id 34258, offset 0, flags [none], proto: UDP (17), length: 231) XXX.XXX.XXX.129.59355 > XXX
.XXX.XXX.129.1813: RADIUS, length: 203
Accounting Request (4), id: 0xdf, Authenticator: 8e381d93036159faf44668b400403a9f
Username Attribute (1), length: 10, Value: user4
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.121
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius]
0x0000: X [|radius]
08:46:52.006180 IP (tos 0x0, ttl 64, id 34259, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.59355: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0xdf, Authenticator: 71076d45f47f02944419c017c1408092
08:46:57.031248 IP (tos 0x0, ttl 64, id 34383, offset 0, flags [none], proto: UDP (17), length: 242) XXX.XXX.XXX.129.52499 > XXX
.XXX.XXX.129.1813: RADIUS, length: 214
Accounting Request (4), id: 0x8b, Authenticator: 308ab2eea576048c9a8ab051ffdb2938
Username Attribute (1), length: 15, Value: user5
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.173
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 18, Value: [|radius]
0x0000: X [|radius]
08:46:57.035743 IP (tos 0x0, ttl 64, id 34384, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.52499: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0x8b, Authenticator: b5966fd9dcda6cc7461c48b97d2bec15
08:46:59.532790 IP (tos 0x0, ttl 64, id 34395, offset 0, flags [none], proto: UDP (17), length: 243) XXX.XXX.XXX.129.58045 > XXX
.XXX.XXX.129.1813: RADIUS, length: 215
Accounting Request (4), id: 0x5c, Authenticator: 4d6cb1252ea0b5762d34bbc841a3f9ed
Username Attribute (1), length: 16, Value: user6
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.179
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius]
0x0000: X [|radius]
08:46:59.554103 IP (tos 0x0, ttl 64, id 34396, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.58045: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0x5c, Authenticator: 7432260fa37dae970c78198a9e5e923a
08:47:07.580791 IP (tos 0x0, ttl 64, id 34407, offset 0, flags [none], proto: UDP (17), length: 233) XXX.XXX.XXX.129.60644 > XXX
.XXX.XXX.129.1813: RADIUS, length: 205
Accounting Request (4), id: 0x4f, Authenticator: 0a9617838fba04faad448c44d06d71b6
Username Attribute (1), length: 11, Value: user7
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.153
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius]
0x0000: X [|radius]
08:47:07.585498 IP (tos 0x0, ttl 64, id 34408, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.60644: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0x4f, Authenticator: 2fa9d8161b441a9f5336f630fe55e9fa
08:47:08.197706 IP (tos 0x0, ttl 64, id 34409, offset 0, flags [none], proto: UDP (17), length: 239) XXX.XXX.XXX.129.63164 > XXX
.XXX.XXX.129.1813: RADIUS, length: 211
Accounting Request (4), id: 0xb2, Authenticator: 2fe5ce8331e665ebbea87ec953075c2d
Username Attribute (1), length: 14, Value: user1
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.141
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000
Calling Station Attribute (31), length: 17, Value: [|radius]
0x0000: X [|radius]
08:47:08.202234 IP (tos 0x0, ttl 64, id 34410, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.63164: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0xb2, Authenticator: 9308c51e608c6503d0ed826ca179d817
08:47:09.428670 IP (tos 0x0, ttl 64, id 34412, offset 0, flags [none], proto: UDP (17), length: 59) XXX.XXX.XXX.129.50747 > XXX.
4XXX.XXX.129.53: [udp sum ok] 62382+ A? www.orkut.com. (31)
08:47:09.428851 IP (tos 0x0, ttl 64, id 34413, offset 0, flags [none], proto: UDP (17), length: 152) XXX.XXX.XXX.129.53 > XXX.8
.244.129.50747: 62382 q: A? www.orkut.com. 5/0/0 www.orkut.com. CNAME orkut.l.google.com., orkut.l.google.com.[|domain]
08:47:11.705737 IP (tos 0x0, ttl 64, id 34427, offset 0, flags [none], proto: UDP (17), length: 250) XXX.XXX.XXX.129.54776 > XXX
.XXX.XXX.129.1813: RADIUS, length: 222
Accounting Request (4), id: 0x9e, Authenticator: f46cb516f565b2533b8f797708c04f41
Username Attribute (1), length: 20, Value: user2
0x0000: X
0x0010: 6e6f
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.182
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000 [|radius]
08:47:14.722579 IP (tos 0x0, ttl 64, id 34462, offset 0, flags [none], proto: UDP (17), length: 250) XXX.XXX.XXX.129.54776 > XXX
.XXX.XXX.129.1813: RADIUS, length: 222
Accounting Request (4), id: 0x9e, Authenticator: f46cb516f565b2533b8f797708c04f41
Username Attribute (1), length: 20, Value: user2
0x0000: X
0x0010: 6e6f
Service Type Attribute (6), length: 6, Value: Framed
0x0000: 0000 0002
Framed Protocol Attribute (7), length: 6, Value: PPP
0x0000: 0000 0001
Framed IP Address Attribute (8), length: 6, Value: XXX.XXX.XXX.182
0x0000: X
Framed IP Network Attribute (9), length: 6, Value: 0.0.0.0
0x0000: 0000 0000 [|radius]
08:47:14.727705 IP (tos 0x0, ttl 64, id 34463, offset 0, flags [none], proto: UDP (17), length: 48) XXX.XXX.XXX.129.1813 > XXX.
XXX.XXX.129.54776: [udp sum ok] RADIUS, length: 20
Accounting Response (5), id: 0x9e, Authenticator: 2b5bbecd09941fda409322375fac86f5
08:47:28.519682 IP (tos 0x0, ttl 64, id 34515, offset 0, flags [none], proto: UDP (17), length: 247) XXX.XXX.XXX.129.51199 > XXX
.XXX.XXX.129.1813: RADIUS, length: 219
Accounting Request (4), id: 0xc3, Authenticator: 1eacbab964455ecd42ae9251d6eeaee0
Username Attribute (1), length: 18, Value: user3
0x0000: X
Service Type Attribute (6), length: 6, Value: Framed

>The ppp.log keeps on "Radius: Request re-sent" for that user.
>I'm trying to solve that for days, without success. Anything I tried to stop that multiple >accounts doesn't help.
>So any help, like always, will be appreciated.
>Thanks in advance.