erx router and coa requests

Bill Schoolfield bill at billmax.com
Fri Nov 20 23:42:29 CET 2015


This is a followup on a resolution. Posted here so someone else won't 
have to go through this pain. After trying Juniper support (they were 
clueless) and dozens of other changes, I decided that perhaps the format 
of the Acct-Session-Id value was the issue. The one used included 
interface info as well as hex encoded session number.

The router has a command to change this format to a normal decimal number:

routername(config)#radius acct-session-id-format decimal

Once set, the disconnect requests work.

Bill


On 11/19/2015 11:11 AM, Bill Schoolfield wrote:
> Hi All,
>
> This isn't freeradius specific per se but I can't find anything on the 
> web about this. Maybe someone here has experience with this.
>
> I'm trying to drop a session using radclient:
>
> Sending Disconnect-Request of id 169 to 204.101.13.1 port 1700
>         User-Name = "someid at example.com"
>         Acct-Session-Id = "erx 
> ip:67.69.123.10:67.69.201.164:1698:d542:29da:ae8e:33d542:002"
> rad_recv: Disconnect-NAK packet from host 204.101.13.1 port 1700, 
> id=169, length=26
>         Error-Cause = Session-Context-Not-Found
>
> But regardless of what I try I can't seem to send the right attrs to 
> get (ie. find) an active session dropped.
>
> The NAS is a Juniper Edge Routing Switch ERX-310. Best I can tell I 
> have the right attrs. Including others results in Unsupported attr 
> error. Omitting either of these two results in attr missing error.
>
> Does anybody know the what should be passed? Here is the radacct 
> record for the session:
>
>            radacctid: 959301
>        acctsessionid: erx 
> ip:67.69.123.10:67.69.201.164:1698:d542:29da:ae8e:33d542:002
>         acctuniqueid: d0c22edd21381824
>             username: someid at example.com
>            groupname:
>                realm:
>         nasipaddress: 204.101.13.1
>            nasportid: 124498
>          nasporttype: Virtual
>        acctstarttime: 2015-11-19 10:28:55
>         acctstoptime: NULL
>      acctsessiontime: 3600
>        acctauthentic: RADIUS
>    connectinfo_start:
>     connectinfo_stop: NULL
>      acctinputoctets: 6638966
>     acctoutputoctets: 140935633
>      calledstationid:
>     callingstationid: GigabitEthernet 5/0/4.1300052:130-52=23587452684=2
>   acctterminatecause:
>          servicetype: Framed-User
>       framedprotocol: PPP
>      framedipaddress: 204.101.88.246
>       acctstartdelay: 0
>        acctstopdelay: NULL
> xascendsessionsvrkey:
>
> Bill
>
>



More information about the Freeradius-Users mailing list