Пытаемся настроить ISG на ASR1002. Поиск по интерфейсу на устройстве. Первая авторизация проходит нормально, а вторая нет. Подскажите в чем может быть проблема.
У кого-нибудь вообще получилось реализовать авторизацию по интерфейсу, а не как в вики по логину?
Код:
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 115
Authenticator: {61 6D 71 AF C7 46 38 FD 2E 32 E0 A4 E7 C0 0D 09}
Attributes:
NAS-Identifier=Cisco_ASR1002.local
User-Name=0006c4a81d0ef7a0:00040032000a:a8f9.4b29.aef3
User-Password=cisco
NAS-IP-Address=192.168.1.2
NAS-Port=40
Service-Type=5
NAS-Port-Id=0/0/0/50
Event-Timestamp=1490769042
Acct-Session-Id=0/0/0/50_7400000000000028
NAS-Port-Type=33
cisco-avpair=circuit-id-tag=00040032000a
cisco-avpair=remote-id-tag=0006c4a81d0ef7a0
cisco-avpair=vendor-class-id-tag=Eltex-NV501-revA-iptvportal-1.0.21-b131
cisco-NAS-Port=0/0/0/50
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Access-Request
Identifier: 115
Authenticator: {61 6D 71 AF C7 46 38 FD 2E 32 E0 A4 E7 C0 0D 09}
Attributes:
NAS-Identifier=Cisco_ASR1002.local
User-Name=0006c4a81d0ef7a0:00040032000a
User-Password=cisco
NAS-IP-Address=192.168.1.2
NAS-Port=40
Service-Type=5
NAS-Port-Id=0/0/0/50
Event-Timestamp=1490769042
Acct-Session-Id=0/0/0/50_7400000000000028
NAS-Port-Type=33
Calling-Station-Id=a8f9.4b29.aef3
cisco-avpair=circuit-id-tag=00040032000a
cisco-avpair=remote-id-tag=0006c4a81d0ef7a0
cisco-avpair=vendor-class-id-tag=Eltex-NV501-revA-iptvportal-1.0.21-b131
cisco-NAS-Port=0/0/0/50
Common options: {agentRemoteId=c4a81d0ef7a0, agentCircuitId=0032000a}
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] RadiusProcessor - Create new radius session.
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetNas - agentRemoteId=c4a81d0ef7a0
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetNas - Found agentDevice:4
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetNas - findServ agentDeviceRuntime=ru.bitel.bgbilling.modules.inet.runtime.device.InetDeviceRuntime@6cc623f
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetNas - Search serv on deviceId=4; interfaceId=10
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetNas - MAC-address not found.
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetRadiusProcessor - Password verification disabled.
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusProcessor - [username=0006c4a81d0ef7a0:00040032000a] Authenticated as inetServId:6545
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetRadiusProcessor - Identifier from request: null
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetRadiusProcessor - MAC-address from request:
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] InetAccountingPeriodList - Create:
AccountingPeriod: 51965: 20.03.2017 00:00:00.0 - 31.03.2017 23:59:59.999
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetApplication - contract tariffOptions: {}
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetApplication - inetServ[id=6545] balance ok: 0.00 [0]
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetApplication - OptionSet: [30]
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusProcessor - Not found free static IP in serv
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusProcessor - Set ip from pool
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusProcessor - Return code=0
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetDhcpHelperProcessor - Put auth accept 200:4:A8F94B29AEF3 192.168.50.104
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Accept
Identifier: 115
Authenticator: {}
Attributes:
Acct-Interim-Interval=60
Framed-IP-Address=192.168.50.104
Idle-Timeout=4200
cisco-avpair=subscriber:accounting-list=ASR
cisco-SSG-Account-Info=AINET
Process time auth: 1
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] HourlyDataLogger - Create log file...
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] HourlyLogFileUtils - Next log file: /bgbil7/access/data/radius/source_200/2017/2017-03/2017-03-29/log_2017-03-
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] HourlyDataLogEntry - Create dataLog file: /bgbil7/access/data/radius/source_200/2017/2017-03/2017-03-29/log_20
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] BGDataLog - DataLog file [data/radius/source_200/2017/2017-03/2017-03-29/log_2017-03-29-09.005.bgdl] was opene
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] DataLog - Writing TLV finished(3)=[0]
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] DataLog - Writing TLV buffer(4)=[type=chunked, size=262144]
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] DataLog - Writing TLV compression(5)=[type=zlib, level=1, strategy=1]
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] DataLog - Writing TLV distributed(6)=[1]
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] DataLog - Writing TLV streaming(7)=[1]
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] BGDataLog - Header length=51
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] ZLIBWritableChannel - ZLIBWritableChannel bufferLength=262160
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-6] ProcessorRequest - Sending to /192.168.1.2:1645
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-6] InetRadiusListenerWorker - RESPONSE:
Packet type: Access-Accept
Identifier: 115
Authenticator: {7C 0D 73 F0 A2 85 2E C8 01 82 F4 A6 D8 7F F0 11}
Attributes:
Acct-Interim-Interval=60
Framed-IP-Address=192.168.50.104
Idle-Timeout=4200
cisco-avpair=subscriber:accounting-list=ASR
cisco-SSG-Account-Info=AINET
Process time auth: 69
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 116
Authenticator: {E6 AE 69 41 DA FB BA F4 D3 AD 42 11 25 EC 36 5F}
Attributes:
NAS-Identifier=Cisco_ASR1002.local
User-Name=INET
User-Password=cisco
NAS-IP-Address=192.168.1.2
Service-Type=5
Event-Timestamp=1490769043
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - REQUEST_AFTER_PREPROCESS:
Packet type: Access-Request
Identifier: 116
Authenticator: {E6 AE 69 41 DA FB BA F4 D3 AD 42 11 25 EC 36 5F}
Attributes:
NAS-Identifier=Cisco_ASR1002.local
User-Name=INET
User-Password=cisco
NAS-IP-Address=192.168.1.2
Service-Type=5
Event-Timestamp=1490769043
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-3] RadiusProcessor - Create new radius session.
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-3] InetNas - agentRemoteId=null
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-3] InetNas - findServ agentDeviceRuntime=null
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] InetNas - Search serv on deviceId=200; interfaceId=-1
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - [username=INET] InetServ not found.
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - Return code=1
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Reject
Identifier: 116
Authenticator: {}
Attributes:
Reply-Message=1
Process time auth: 0
radius 03-29/09:54:37 DEBUG [rdsLstnr-p-9-t-3] ProcessorRequest - Sending to /192.168.1.2:1645
radius 03-29/09:54:37 INFO [rdsLstnr-p-9-t-3] InetRadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 116
Authenticator: {94 C2 1B 65 E4 C6 7B 4D E6 D8 5B 5F 5C C0 32 35}
Attributes:
Reply-Message=1
Process time auth: 0