initial accept, but then fails

[Phil Mayers]

On 06/16/2013 01:15 AM, geebs wrote:
> On Fri, Jun 14, 2013 at 3:33 PM, Iliya Peregoudov <iperegudov at cboss.ru
> <mailto:iperegudov at cboss.ru>> wrote:
>
>     On 14.06.2013 5:56, geebs wrote:
>
>         rad_recv: Access-Request packet from host 10.8.13.254 port 1645,
>         id=6,
>         length=220
>                   User-Name = "example.com <http://example.com>
>         <http://example.com>"
>
>                   User-Password = "cisco"
>                   Calling-Station-Id = "GigabitEthernet
>         14/0/3.31010096:3101-96#__587204450###pppoe
>         00:04:ed:d1:78:85#QTNITE4025M
>         atm 1/1/04/27:8.35#"
>                   Connect-Info = "1000000000"
>                   NAS-Port-Type = Virtual
>                   NAS-Port = 501
>                   NAS-Port-Id = "Uniq-Sess-ID501"
>                   Service-Type = Outbound-User
>                   NAS-IP-Address = 10.8.13.254
>
>
>     Looks line Cisco PPPoE service profile request
>     http://www.cisco.com/en/US/__docs/ios-xml/ios/bbdsl/__configuration/12-4t/bba-svc-__callstup.html
>     <http://www.cisco.com/en/US/docs/ios-xml/ios/bbdsl/configuration/12-4t/bba-svc-callstup.html>
>     -
>     List info/subscribe/unsubscribe? See
>     http://www.freeradius.org/__list/users.html
>     <http://www.freeradius.org/list/users.html>
>
>
> Yes it is, I'm not sure what's going on there, but to be honest this is
> not the major issue.

Well, as Illya says - the Cisco is making a request, over RADIUS, for a 
PPPoE profile. You aren't configured for that, so return a reject.

Is it really that hard to imagine that *this is* the cause?

Change the config on the Cisco to *not* request PPPoE profiles over 
RADIUS, or alternatively read up on what you need to return, and start 
returning it.

>
> The problem is that michaelr at example.com <mailto:michaelr at example.com>
> does initially connect, but then gets disconnected...
>
> If you have a look at the 1st post, they connect fine, but then get
> booted, and the only thing in the logs is the above.
> What would cause this ?

Well... "this". The reject of the PPPoE profile request.

All the info you need is at the URL Illya gave.