• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

AAA RADIUS响应问题

2025-01-14提问
  • 0关注
  • 0收藏,681浏览
粉丝:0人 关注:0人

问题描述:

portal认证成功后,开始发送accounting request请求,但是ap没响应 怎么办!
故障日志:

11:11:33.653 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [info,81] - ggbond::: 新增用户在线信息: sessiOnId=10912302103560a01fe0b

11:11:33.654 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [info,81] - ggbond:发送 RADIUS 记账(Start)响应至 _gateway/192.168.31.1:4742, Accounting-Response, ID 41

11:11:33.654 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [print,68] - Accounting-Response, ID 41

11:12:29.141 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectConfig - [debug,135] - ==>  Preparing: select config_id, config_name, config_key, config_value, config_type, create_by, create_time, update_by, update_time, remark from sys_config WHERE config_key = ?

11:12:29.142 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectConfig - [debug,135] - ==> Parameters: sys.login.blackIPList(String)

11:12:29.147 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectConfig - [debug,135] - <==      Total: 1

11:12:29.194 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectUserByLoginName - [debug,135] - ==>  Preparing: select u.user_id, u.dept_id, u.login_name, u.user_name, u.user_type, u.email, u.avatar, u.phonenumber, u.sex, u.password, u.salt, u.status, u.del_flag, u.login_ip, u.login_date, u.pwd_update_date, u.create_by, u.create_time, u.update_by, u.update_time, u.remark, d.dept_id, d.parent_id, d.ancestors, d.dept_name, d.order_num, d.leader, d.status as dept_status, r.role_id, r.role_name, r.role_key, r.role_sort, r.data_scope, r.status as role_status from sys_user u left join sys_dept d on u.dept_id = d.dept_id left join sys_user_role ur on u.user_id = ur.user_id left join sys_role r on r.role_id = ur.role_id where u.login_name = ? and u.del_flag = '0'

11:12:29.207 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectUserByLoginName - [debug,135] - ==> Parameters: admin(String)

11:12:29.212 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectUserByLoginName - [debug,135] - <==      Total: 1

11:12:29.238 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectPermsByRoleId - [debug,135] - ==>  Preparing: select distinct m.perms from sys_menu m left join sys_role_menu rm on m.menu_id = rm.menu_id where m.visible = '0' and rm.role_id = ?

11:12:29.244 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectPermsByRoleId - [debug,135] - ==> Parameters: 1(Long)

11:12:29.255 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.selectPermsByRoleId - [debug,135] - <==      Total: 0

11:12:29.257 [schedule-pool-36] INFO  sys-user - [run,109] - [192.168.31.41]内网IP[admin][Success][登录成功]

11:12:29.260 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.updateUser - [debug,135] - ==>  Preparing: update sys_user SET login_ip = ?, login_date = ?, update_time = sysdate() where user_id = ?

11:12:29.262 [schedule-pool-36] DEBUG c.r.s.m.S.insertLogininfor - [debug,135] - ==>  Preparing: insert into sys_logininfor (login_name, status, ipaddr, login_location, browser, os, msg, login_time) values (?, ?, ?, ?, ?, ?, ?, sysdate())

11:12:29.270 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.updateUser - [debug,135] - ==> Parameters: 192.168.31.41(String), 2025-01-14 11:12:29.257(Timestamp), 1(Long)

11:12:29.298 [http-nio-8090-exec-60] DEBUG c.r.s.m.S.updateUser - [debug,135] - <==    Updates: 1

11:12:29.444 [http-nio-8090-exec-61] DEBUG c.r.s.m.S.selectMenuNormalAll - [debug,135] - ==>  Preparing: select distinct m.menu_id, m.parent_id, m.menu_name, m.url, m.visible, m.is_refresh, ifnull(m.perms,'') as perms, m.target, m.menu_type, m.icon, m.order_num, m.create_time from sys_menu m where m.menu_type in ('M', 'C') and m.visible = 0 order by m.parent_id, m.order_num

11:12:29.446 [http-nio-8090-exec-61] DEBUG c.r.s.m.S.selectMenuNormalAll - [debug,135] - ==> Parameters: 

11:12:29.456 [schedule-pool-18] DEBUG c.r.s.m.S.saveOnline - [debug,135] - ==>  Preparing: replace into sys_user_online(sessionId, login_name, dept_name, ipaddr, login_location, browser, os, status, start_timestamp, last_access_time, expire_time) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)

11:12:29.470 [http-nio-8090-exec-61] DEBUG c.r.s.m.S.selectMenuNormalAll - [debug,135] - <==      Total: 29

11:12:29.487 [schedule-pool-18] DEBUG c.r.s.m.S.saveOnline - [debug,135] - ==> Parameters: 8ca4d762-4bab-4dc6-b2d5-0bca51eacbcb(String), admin(String), 研发部门(String), 192.168.31.41(String), 内网IP(String), Chrome 13(String), Windows 10(String), on_line(String), 2025-01-14 11:10:25.102(Timestamp), 2025-01-14 11:12:29.427(Timestamp), 1800000(Long)

11:12:29.498 [schedule-pool-18] DEBUG c.r.s.m.S.saveOnline - [debug,135] - <==    Updates: 1

11:12:29.567 [schedule-pool-36] DEBUG c.r.s.m.S.insertLogininfor - [debug,135] - ==> Parameters: admin(String), 0(String), 192.168.31.41(String), 内网IP(String), Chrome 13(String), Windows 10(String), 登录成功(String)

11:12:29.572 [schedule-pool-36] DEBUG c.r.s.m.S.insertLogininfor - [debug,135] - <==    Updates: 1

11:13:02.894 [NioDatagramAcceptor-2] INFO  c.r.r.t.s.Memarylogger - [info,76] - 有客户端接入portal服务器,IP地址是:/192.168.31.1:2000

11:13:02.896 [portalExecutorFilterPool-1-thread-1] INFO  c.r.r.t.s.Memarylogger - [info,76] - 有客户端发送portal报文过来了,IP地址是:/192.168.31.1:2000

11:13:02.929 [NioDatagramAcceptor-4] INFO  c.r.r.t.s.Memarylogger - [print,68] - UdpSession created (0x00000005: nio datagram, server, _gateway/192.168.31.1:4742 => /0:0:0:0:0:0:0:0:1813)

11:13:02.934 [acctExecutorFilterPool-3-thread-1] DEBUG c.r.r.t.m.B.findByidentifier - [debug,135] - ==>  Preparing: select id, identifier, name, ipaddr, vendor_id, portal_vendor, secret, coa_port, ac_port, auth_limit, acct_limit, status, remark, create_time from tr_bras where identifier = ? limit 1

11:13:02.935 [acctExecutorFilterPool-3-thread-1] DEBUG c.r.r.t.m.B.findByidentifier - [debug,135] - ==> Parameters: htc(String)

11:13:02.939 [acctExecutorFilterPool-3-thread-1] DEBUG c.r.r.t.m.B.findByidentifier - [debug,135] - <==      Total: 1

11:13:02.942 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [info,81] - ggbond:接收到 RADIUS 记账(Stop)请求 <_gateway/192.168.31.1:4742 -> /0:0:0:0:0:0:0:0:1813> : Accounting-Request(Stop), ID 42, User-Name: ggbond, NAS-Identifier: htc, NAS-Port: 16921576, NAS-Port-Id: 0000001000, NAS-Port-Type: Wireless-802.11, Calling-Station-Id: B6-1D-54-C8-96-B0, Called-Station-Id: 38-91-D5-A0-1F-E0:706-FangKe, Acct-Status-Type: Stop, Acct-Authentic: RADIUS, Acct-Session-Id: 10912302103560a01fe0b, Framed-IP-Address: 192.168.100.2, NAS-IP-Address: 192.168.31.1, Event-Timestamp: 1262207125, Acct-Session-Time: 89, Acct-Delay-Time: 0, Acct-Input-Octets: 175624, Acct-Input-Packets: 675, Acct-Output-Octets: 716958, Acct-Output-Packets: 855, Acct-Input-Gigawords: 0, Acct-Output-Gigawords: 0, Acct-Terminate-Cause: Admin-Reset, Vendor-Specific: Huawei (2011)

  Unknown-Sub-Attribute-144: 0x00000000

  Unknown-Sub-Attribute-145: 0x00000000

  Unknown-Sub-Attribute-146: 0x00000000

  Unknown-Sub-Attribute-147: 0x00000000

  Unknown-Sub-Attribute-148: 0x00000000

  Unknown-Sub-Attribute-149: 0x00000000

11:13:02.943 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [print,68] - Accounting-Request(Stop), ID 42

User-Name: ggbond

NAS-Identifier: htc

NAS-Port: 16921576

NAS-Port-Id: 0000001000

NAS-Port-Type: Wireless-802.11

Calling-Station-Id: B6-1D-54-C8-96-B0

Called-Station-Id: 38-91-D5-A0-1F-E0:706-FangKe

Acct-Status-Type: Stop

Acct-Authentic: RADIUS

Acct-Session-Id: 10912302103560a01fe0b

Framed-IP-Address: 192.168.100.2

NAS-IP-Address: 192.168.31.1

Event-Timestamp: 1262207125

Acct-Session-Time: 89

Acct-Delay-Time: 0

Acct-Input-Octets: 175624

Acct-Input-Packets: 675

Acct-Output-Octets: 716958

Acct-Output-Packets: 855

Acct-Input-Gigawords: 0

Acct-Output-Gigawords: 0

Acct-Terminate-Cause: Admin-Reset

Vendor-Specific: Huawei (2011)

  Unknown-Sub-Attribute-144: 0x00000000

  Unknown-Sub-Attribute-145: 0x00000000

  Unknown-Sub-Attribute-146: 0x00000000

  Unknown-Sub-Attribute-147: 0x00000000

  Unknown-Sub-Attribute-148: 0x00000000

  Unknown-Sub-Attribute-149: 0x00000000

11:13:02.947 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [info,81] - ggbond:发送 RADIUS 记账(Stop)响应至 _gateway/192.168.31.1:4742, Accounting-Response, ID 42

11:13:02.948 [acctExecutorFilterPool-3-thread-1] INFO  c.r.r.t.s.Memarylogger - [print,68] - Accounting-Response, ID 42

ap配置:

radius scheme rs1

 primary authentication 192.168.31.57

 primary accounting 192.168.31.57

 key authentication cipher $c$3$mynQo/bg1W9bbnB89DioMigUSwyCmhkjPTwQ

 key accounting cipher $c$3$Oyu91wDG9pRzr+lKs6yBrPy/MytCR9xcJJMn

 user-name-format without-domain

 accounting-on enable

 attribute 25 car

#

domain dm1

 authentication portal radius-scheme rs1

 authorization portal radius-scheme rs1

 accounting portal radius-scheme rs1

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

interface Vlan-interface1000

 ip address 192.168.100.1 255.255.255.0

 portal server ruoyi method direct

 portal domain dm1

 portal nas-id htc

 portal nas-ip 192.168.31.1

 portal url-param include nas-id param-name wlanacname

 portal url-param include nas-ip param-name wlanacip

#

1 个回答
Xcheng 九段
粉丝:132人 关注:3人

没回应,建议网络连通性。

如果没问题找radius服务器侧定位呀

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明