问

E5130 V7+windows 2012 Radius认证问题

Radius
AAA

2020-09-25提问

0关注
1收藏，1549浏览

Oliver

Oliver 零段

粉丝：0人关注：0人

问题描述：

设置列表

有序列表
无序列表

对齐方式

靠左
居中
靠右

最近想把几台E5130S的H3C交换机通过Radius验证远程telnet管理

遇到了Radius服务器验证通过，但是交换机登录不上的问题

交换机配置如下：

debug的信息也没出现报错，开始accouting就直接关闭会话了

*Sep 8 14:13:20:439 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: Processing RADIUS authentication.

*Sep 8 14:13:20:439 2020 XXYY RADIUS/7/EVENT:

Processing AAA request data.

*Sep 8 14:13:20:439 2020 XXYY RADIUS/7/EVENT:

Got request data successfully, primitive: authentication.

*Sep 8 14:13:20:440 2020 XXYY RADIUS/7/EVENT:

Getting RADIUS server info.

*Sep 8 14:13:20:440 2020 XXYY RADIUS/7/EVENT:

Got RADIUS server info successfully.

*Sep 8 14:13:20:440 2020 XXYY RADIUS/7/EVENT:

Created request context successfully.

*Sep 8 14:13:20:441 2020 XXYY RADIUS/7/EVENT:

Created request packet successfully, dstIP: Y.Y.Y.Y, dstPort: 1812, VPN instance: --(public), socketFd: 27, pktID: 150.

*Sep 8 14:13:20:441 2020 XXYY RADIUS/7/EVENT:

Added packet socketfd to epoll successfully, socketFd: 27.

*Sep 8 14:13:20:441 2020 XXYY RADIUS/7/EVENT:

Mapped PAM item to RADIUS attribute successfully.

*Sep 8 14:13:20:442 2020 XXYY RADIUS/7/EVENT:

Got RADIUS username format successfully, format: 2.

*Sep 8 14:13:20:442 2020 XXYY RADIUS/7/EVENT:

Added attribute user-name successfully, user-name: A1770.

*Sep 8 14:13:20:444 2020 XXYY RADIUS/7/EVENT:

Filled RADIUS attributes in packet successfully.

*Sep 8 14:13:20:444 2020 XXYY RADIUS/7/EVENT:

Composed request packet successfully.

*Sep 8 14:13:20:444 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: Sent authentication request successfully.

*Sep 8 14:13:20:444 2020 XXYY RADIUS/7/EVENT:

Created response timeout timer successfully.

*Sep 8 14:13:20:445 2020 XXYY RADIUS/7/PACKET:

User-Name="A1770"

NAS-Identifier="XXYY"

Framed-IP-Address=172.16.33.99

Acct-Session-

User-Password=******

Service-Type=Login-User

NAS-IP-Address=x.x.x.x

H3c-Product-

H3c-Nas-Startup-Timestamp=1573202940

*Sep 8 14:13:20:446 2020 XXYY RADIUS/7/EVENT:

Sent request packet successfully.

*Sep 8 14:13:20:447 2020 XXYY RADIUS/7/PACKET:

01 96 00 99 1c 89 55 57 d9 14 b1 38 b7 3d af ae

ce 68 84 64 01 07 41 31 37 37 30 20 0c 6a 72 32

2d 31 2d 32 46 4e 32 08 06 ac 10 21 63 2c 29 30

30 30 30 30 30 30 31 32 30 32 30 30 39 30 38 30

36 31 33 32 30 30 30 30 30 30 30 30 31 30 38 31

39 37 33 33 33 37 02 12 bd 02 dd 45 6c 32 36 1d

5b dc b5 30 6a 60 37 43 06 06 00 00 00 01 04 06

ac 10 38 4e 1a 19 00 00 63 a2 ff 13 48 33 43 20

53 35 31 33 30 53 2d 35 32 50 2d 45 49 1a 0c 00

00 63 a2 3b 06 5d c5 2b fc

*Sep 8 14:13:20:447 2020 XXYY RADIUS/7/EVENT:

Sent request packet and create request context successfully.

*Sep 8 14:13:20:448 2020 XXYY RADIUS/7/EVENT:

Added request context to global table successfully.

*Sep 8 14:13:20:448 2020 XXYY RADIUS/7/EVENT:

Processing AAA request data.

*Sep 8 14:13:20:448 2020 XXYY RADIUS/7/EVENT:

Reply SocketFd recieved EPOLLIN event.

*Sep 8 14:13:20:449 2020 XXYY RADIUS/7/EVENT:

Received reply packet succuessfully.

*Sep 8 14:13:20:449 2020 XXYY RADIUS/7/EVENT:

Found request context, dstIP: Y.Y.Y.Y, dstPort: 1812, VPN instance: --(public), socketFd: 27, pktID: 150.

*Sep 8 14:13:20:449 2020 XXYY RADIUS/7/EVENT:

The reply packet is valid.

*Sep 8 14:13:20:450 2020 XXYY RADIUS/7/EVENT:

Decoded reply packet successfully.

*Sep 8 14:13:20:450 2020 XXYY RADIUS/7/PACKET:

Idle-Timeout=1200

Service-Type=Login-User

Session-Timeout=59940

Class=0xb5ec09790000013700010200ac102bc700000000193b4dc893e74cc801d685a61c64cb460000000000000005

Microsoft-Attr-14=0x00000032

Microsoft-Attr-15=0x00000078

*Sep 8 14:13:20:451 2020 XXYY RADIUS/7/PACKET:

02 96 00 6c 25 cc 54 93 a7 d8 4c dd eb 07 f1 d1

35 31 19 4c 1c 06 00 00 04 b0 06 06 00 00 00 01

1b 06 00 00 ea 24 19 2e b5 ec 09 79 00 00 01 37

00 01 02 00 ac 10 2b c7 00 00 00 00 19 3b 4d c8

93 e7 4c c8 01 d6 85 a6 1c 64 cb 46 00 00 00 00

00 00 00 05 1a 0c 00 00 01 37 0e 06 00 00 00 32

1a 0c 00 00 01 37 0f 06 00 00 00 78

*Sep 8 14:13:20:451 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: Fetched authentication reply-data successfully, resultCode: 0

*Sep 8 14:13:20:451 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: Received authentication reply message, resultCode: 0

*Sep 8 14:13:20:453 2020 XXYY RADIUS/7/EVENT:

Sent reply message successfully.

*Sep 8 14:13:20:454 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: Processing RADIUS authorization.

*Sep 8 14:13:20:456 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: RADIUS Authorization successfully.

*Sep 8 14:13:20:473 2020 XXYY RADIUS/7/EVENT:

PAM_RADIUS: RADIUS accounting started.

*Sep 8 14:13:20:474 2020 XXYY RADIUS/7/EVENT:

Processing AAA request data.

*Sep 8 14:13:20:474 2020 XXYY RADIUS/7/EVENT:

Got request data successfully, primitive: accounting-start.

*Sep 8 14:13:20:474 2020 XXYY RADIUS/7/EVENT:

Getting RADIUS server info.