• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

imc+portal认证提示设备拒绝请求,

2024-04-19提问
  • 0关注
  • 0收藏,108浏览
粉丝:0人 关注:1人

问题描述:

portal日志

2024-04-18 21:52:30.997[Portal服务器][调试(0)][67][RequestProcessor::run]Begin processRequest() method.

2024-04-18 21:52:30.998[Portal服务器][调试(0)][67][RequestProcessor::ackChallengeEvent]获取域信息成功, 所基于的公网IP是192.168.30.22、 私网IP是192.168.30.22、代理端接收报文源地址是100.0.0.200、接入端口是H3C-vlan-01-0030@vlan

2024-04-18 21:52:30.998[Portal服务器][调试(0)][67][RequestProcessor::ackChallengeEvent]errorCode = 0

2024-04-18 21:52:30.998[Portal服务器][调试(0)][67][RequestProcessor::ackChallengeEvent]用户“192.168.30.22”状态从“LOGIN_CHALLENGE_REQUEST_STATUS”变为“LOGIN_AUTH_REQUEST_STATUS”

[2024-4-18 21:52:30]调试User name is test, Transparent is false, Domain PortalFastAuth is false, System FastAuth is true

2024-04-18 21:52:30.999[Portal服务器][调试(0)][67][RequestProcessor::run]End processRequest() method.

2024-04-18 21:52:30.999[Portal服务器][调试(0)][23][TimerSendTask::run]packet insert into responseDeviceQueue, send count = 1

2024-04-18 21:52:31.000[Portal服务器][调试(0)][24][ProxyResponseDeviceHandler::run]192.168.30.22 ; REQ_AUTH(3) ; 70 ; 100.0.0.1:2000 ; 报文处理成功

<Content>

    <Head>

        Packet Type:REQ_AUTH(3)

        SerialNo:70

        Address:100.0.0.200

        Port:50300

        RemoteIp:100.0.0.1

        RemotePort:2000

        Version:portal 2.0

        Auth Type:CHAP

        ErrorID:0

        UserIP:192.168.30.22

        UserPort:0

        ReqID:63

        Rsvd:0

        attriNum:4

    </Head>

    <Attributes>

        User Name:test

        Challenge Password:***

        Challenge Type:CHAP

        Device Ip:100.0.0.1

    </Attributes>

</Content>

<OriginalPacket>

    00000000h: 00 00 00 00 00 00 00 00    00 00 00 00 64 00 00 01 ;............d...

    00000010h: 07 D0 C3 B4 02 03 00 00    00 46 00 3F C0 A8 1E 16 ;.........F.?....

    00000020h: 00 00 00 04 13 9D 63 B9    33 27 0A 16 1A 60 4F 4C ;......c.3'...`OL

    00000030h: 53 A9 37 F6 01 06 74 65    73 74 04 12 5C C4 77 9D ;S.7...test..\.w.

    00000040h: D7 39 6A 28 F2 FE 54 92    C2 78 20 E7 03 12 FD 1A ;.9j(..T..x .....

    00000050h: FB 4D 4A 93 AA D8 FF 73    E7 33 62 8D 83 AC 0A 06 ;.MJ....s.3b.....

    00000060h: 64 00 00 01                                        ;d...

</OriginalPacket>

 

2024-04-18 21:52:31.007[Portal服务器][调试(0)][21][ProxyRequestHandler::run]192.168.30.22 ; ACK_AUTH(4) ; 70 ; 100.0.0.1:2000 ; 设备拒绝请求(1)

<Content>

    <Head>

        Packet Type:ACK_AUTH(4)

        SerialNo:70

        Address:100.0.0.200

        Port:50908

        RemoteIp:100.0.0.1

        RemotePort:2000

        Version:portal 2.0

        Auth Type:CHAP

        ErrorID:1

        UserIP:192.168.30.22

        UserPort:0

        ReqID:63

        Rsvd:0

        attriNum:2

    </Head>

    <Attributes>

        Session Id:02 00 4c 4f 4f 50

        Device Ip:100.0.0.1

    </Attributes>

</Content>

<OriginalPacket>

    00000000h: 00 00 00 00 00 00 00 00    00 00 00 00 64 00 00 01 ;............d...

    00000010h: 07 D0 C3 B4 02 04 00 00    00 46 00 3F C0 A8 1E 16 ;.........F.?....

    00000020h: 00 00 01 02 F4 CD A2 21    D4 77 BC 7A FE 77 50 AF ;.......!.w.z.wP.

    00000030h: D6 98 73 8A 0B 08 02 00    4C 4F 4F 50 0A 06 64 00 ;..s.....LOOP..d.

    00000040h: 00 01                                              ;..

</OriginalPacket>

 

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::run]Begin processRequest() method.

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::ackAuthEvent]errorCode = 1

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::ackAuthEvent]获取域信息成功, 所基于的公网IP是192.168.30.22、 私网IP是192.168.30.22、代理端接收报文源地址是100.0.0.200、接入端口是H3C-vlan-01-0030@vlan

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::ackAuthEvent] onlineUser<userKey=-361626263284582559795097612598039390700536070143, userName=test, password=***, status=LOGIN_AUTH_REQUEST_STATUS, userPrivateIp=192.168.30.22, userPublicIp=192.168.30.22, userRemoteIp=100.0.0.200, userRemotePort=63088, clientListenPort=0, userMAC=null, userIp=192.168.30.22, devIp=100.0.0.1, devPort=H3C-vlan-01-0030@vlan, lastHeartbeat=1713448351009, OnlineTime=1713448351009, heartbeatOverTime=9223372036854775807, passwdFlag=false, ifInode=false, loginTime=1713448350961, shareKey=hello, serialDeviceNo=70, seriaUserNo=90, deviceTimestamp=0, ip2Status=0, webLanguage=Chinese, userAttrValue=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0, customPagePath=, ssidAttrValue=null, apAttrValue=null, authType=0, ifClientProtect=false, ifPortalAlOne=false, isTransparent=false, hashValue=, chapId=0> 

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::ackAuthEvent]Add userAgentAndIP to userAgentQueue. usermac is null.

2024-04-18 21:52:31.009[Portal服务器][调试(0)][88][DataCacheManager::assembleMatchedFingerPrintUserAgent]Windows NT 10.0

2024-04-18 21:52:31.009[Portal服务器][调试(0)][88][DataCacheManager::assembleMatchedFingerPrintUserAgent]return combinated result terminalVendor:, terminalType:, parentTerminalType:null, terminalTypeZhName:null, terminalTypeEnName:null, terminalOS:Windows 10, parentTerminalOS:Windows

2024-04-18 21:52:31.009[Portal服务器][调试(0)][88][UserAgentProcessorManager::run]Send asn to radius for identify terminal info begin. mac:, userIpv4:192.168.30.22, userIpv6:, userAgent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0,  terminalVendor:, terminalType:, parentTerminalType:null, terminalTypeZhName:null, terminalTypeEnName:null, terminalOS:Windows 10, parentTerminalOS:Windows

[2024-4-18 21:52:31]调试send asn to radius for distinguish terminal info end. 

2024-04-18 21:52:31.009[Portal服务器][错误(160010)][68][RequestProcessor::ackAuthEvent]设备回应报文出错,错误码为“1”,错误信息为“设备拒绝请求”,用户名称为“test”

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::ackAuthEvent]用户“192.168.30.22”状态从“LOGIN_AUTH_REQUEST_STATUS”变为“DEL_STATUS”

2024-04-18 21:52:31.009[Portal服务器][调试(0)][68][RequestProcessor::sendLoginRespToUser]errorCode = 1

2024-04-18 21:52:31.009[Portal服务器][调试(0)][22][ProxyResponseClientHandlsend asn to radius for distinguish terminal info ender::run]192.168.30.22 ; CODE_PP_LOGIN_RESPONSE(101) ; 90 ; 100.0.0.200:63088 ; 设备拒绝请求(1)

<Content>

    <Head>

        Packet Type:CODE_PP_LOGIN_RESPONSE(101)

        SerialNo:90

        Address:100.0.0.200

        Port:50300

        RemoteIp:100.0.0.200

        RemotePort:63088

        Version:portal 2.0

        Auth Type:CHAP

        ErrorID:1

        UserIP:192.168.30.22

        UserPort:0

        ReqID:0

        Rsvd:0

        attriNum:1

    </Head>

    <Attributes>

        Failure Reason:

    </Attributes>

</Content>

<OriginalPacket>

    00000000h: 00 00 00 00 00 00 00 00    00 00 00 00 64 00 00 C8 ;............d...

    00000010h: F6 70 C4 18 02 65 00 00    00 5A 00 00 C0 A8 1E 16 ;.p...e...Z......

    00000020h: 00 00 01 01 B7 AF FB B0    69 5A 72 EC 54 7F 1E 2C ;........iZr.T..,

    00000030h: FC 6A F6 2A 73 02                                  ;.j.*s.

</OriginalPacket>

 

 

 

组网及组网描述:

*Apr 18 21:14:34:241 2024 H3C PORTAL/7/PACKET:

Portal sent 80 bytes of packet: Type=ack_info(10), ErrCode=0, IP=192.168.30.22

*Apr 18 21:14:34:241 2024 H3C PORTAL/7/PACKET:

[  8 PORT                ] [ 34] [H3C-vlan-01-0030@vlan-SSID-@SSID]

[ 11 SESSIONID           ] [  8] [0200-4c4f-4f50]

[ 10 BASIP               ] [  6] [100.0.0.1]

 

*Apr 18 21:14:34:241 2024 H3C PORTAL/7/PACKET:

02 0a 00 00 00 38 00 00 c0 a8 1e 16 00 00 00 03

e1 db f3 f8 40 ef 89 2b 4b 2b 6c 3c ed 8d 78 c8

08 22 48 33 43 2d 76 6c 61 6e 2d 30 31 2d 30 30

33 30 40 76 6c 61 6e 2d 53 53 49 44 2d 40 53 53

49 44 0b 08 02 00 4c 4f 4f 50 0a 06 64 00 00 01

 

 

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/PACKET:

Portal received 32 bytes of packet: Type=req_challenge(1), ErrCode=0, IP=192.168.30.22

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/PACKET:

02 01 00 00 00 38 00 00 c0 a8 1e 16 00 00 00 00

e6 a1 5e 28 8f b7 30 46 84 49 87 68 49 6a dc 84

 

 

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/EVENT: Auth-SM [192.168.30.22]: auth-sm created successfully.

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/EVENT: Auth-SM [192.168.30.22]: Auth-SM processed the REQ_CHALLENGE packet while in state 0.

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/EVENT: Auth-SM [192.168.30.22]: AuthSm process REQ_CHALLENGE packet successfully.

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/EVENT: Auth-SM [192.168.30.22]: Started the auth_sm timer, timeout=15 sec.

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/PACKET:

Portal sent 56 bytes of packet: Type=ack_challenge(2), ErrCode=0, IP=192.168.30.22

*Apr 18 21:14:34:246 2024 H3C PORTAL/7/PACKET:

[  3 CHALLENGE           ] [ 18] [3574b7553e478ecb5c0db8c2e828f941]

[ 10 BASIP               ] [  6] [100.0.0.1]

 

*Apr 18 21:14:34:247 2024 H3C PORTAL/7/PACKET:

02 02 00 00 00 38 00 31 c0 a8 1e 16 00 00 00 02

bf d9 ed 35 7d 1a a0 aa 53 7e 46 12 9b 6e 3d ba

03 12 35 74 b7 55 3e 47 8e cb 5c 0d b8 c2 e8 28

f9 41 0a 06 64 00 00 01

 

*Apr 18 21:14:34:247 2024 H3C PORTAL/7/EVENT: Create portal user successfully while receiving REQ_CHALLENGE.

*Apr 18 21:14:34:247 2024 H3C PORTAL/7/FSM: User-SM[192.168.30.22]: Begin to run.

*Apr 18 21:14:34:247 2024 H3C PORTAL/7/FSM: User-SM [192.168.30.22]: State changed from Initial to Authenticating.

*Apr 18 21:14:34:253 2024 H3C PORTAL/7/PACKET:

Portal received 80 bytes of packet: Type=req_auth(3), ErrCode=0, IP=192.168.30.22

*Apr 18 21:14:34:253 2024 H3C PORTAL/7/PACKET:

[  1 USERNAME            ] [  6] [test]

[  4 CHAPPWD             ] [ 18] [28321edc30c6b77a4d5af33e837af146]

[  3 CHALLENGE           ] [ 18] [3574b7553e478ecb5c0db8c2e828f941]

[ 10 BASIP               ] [  6] [100.0.0.1]

 

*Apr 18 21:14:34:253 2024 H3C PORTAL/7/PACKET:

02 03 00 00 00 38 00 31 c0 a8 1e 16 00 00 00 04

52 43 b2 91 0b e4 6b 38 4a 19 6f 83 aa 8c d2 6a

01 06 74 65 73 74 04 12 28 32 1e dc 30 c6 b7 7a

4d 5a f3 3e 83 7a f1 46 03 12 35 74 b7 55 3e 47

8e cb 5c 0d b8 c2 e8 28 f9 41 0a 06 64 00 00 01

 

 

*Apr 18 21:14:34:253 2024 H3C PORTAL/7/EVENT: Auth-SM [192.168.30.22]: Auth-SM processed the REQ_AUTH packet while in state 0.

*Apr 18 21:14:34:253 2024 H3C PORTAL/7/FSM: Auth-SM: Started to run.

*Apr 18 21:14:34:253 2024 H3C PORTAL/7/FSM: Auth-SM [192.168.30.22]: Entered state Authenticating.

*Apr 18 21:14:34:254 2024 H3C PORTAL/7/EVENT: User-SM[192.168.30.22]: AAA processed authentication request and returned failed.

*Apr 18 21:14:34:255 2024 H3C PORTAL/7/PACKET:

Portal sent 46 bytes of packet: Type=ack_auth(4), ErrCode=1, IP=192.168.30.22

*Apr 18 21:14:34:256 2024 H3C PORTAL/7/PACKET:

[ 11 SESSIONID           ] [  8] [0200-4c4f-4f50]

[ 10 BASIP               ] [  6] [100.0.0.1]

 

*Apr 18 21:14:34:256 2024 H3C PORTAL/7/PACKET:

02 04 00 00 00 38 00 31 c0 a8 1e 16 00 00 01 02

c8 cd e5 f7 9e 9a 84 4b 95 2b b3 c1 29 c1 81 97

0b 08 02 00 4c 4f 4f 50 0a 06 64 00 00 01

 

*Apr 18 21:14:34:257 2024 H3C PORTAL/7/EVENT: User-SM[192.168.30.22]: Auth-SM logged out the user and notified User-SM to process.

*Apr 18 21:14:34:257 2024 H3C PORTAL/7/FSM: User-SM[192.168.30.22]: Begin to run.

*Apr 18 21:14:34:257 2024 H3C PORTAL/7/FSM: User-SM [192.168.30.22]: State changed from Authenticating to Done.

*Apr 18 21:14:34:257 2024 H3C PORTAL/7/FSM: User-SM[192.168.30.22]: User was destroyed.

*Apr 18 21:14:34:257 2024 H3C PORTAL/7/EVENT: Auth-SM [192.168.30.22]: auth-sm was destroyed.

*Apr 18 21:14:34:258 2024 H3C PORTAL/7/EVENT: User-SM[192.168.30.22]: Added ARP rule.

*Apr 18 21:14:34:258 2024 H3C PORTAL/7/EVENT: User-SM[192.168.30.22]: Notified User-Detect-SM to stop detection.

2 个回答
粉丝:112人 关注:8人

问题原因:

1、iMC运行状态异常
2、UDP 50100、50200、2000端口访问异常
3、portal认证方式不一致
4、portal bas-ip 不一致
5、radius nas-ip 不一致
6、radius和portal两边密钥不一致
7、服务器性能不足导致报文丢弃。此时iMC安装目录C:\Program Files\iMC\portal\logs里的
portalproxy会出现队列满的错误(full)
8、portal协议设备和服务器侧不一致
解决方法:
1、保证两边的portal bas-ip,radius nas-ip,密钥key一致,portal协议一致
2、确认服务器的进程正常,服务器在正常规格中
3、保证中间网络通信正常

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明