问

portal debugging 报文的意思

wlan接入

2023-10-18提问

0关注
0收藏，982浏览

zhiliao_9KJOL

zhiliao_9KJOL 二段

粉丝：0人关注：0人

问题描述：

*Oct 18 16:31:58:759 2023 SZ-CX-AC-42.MAN.AC2 PORTAL/7/RULE: [Inbound] execute full rule match, { MatchRes = [Rule3-Redirect] } IfName = WLAN-BSS1/0/20258, PortName = WLAN-BSS1/0/20258, Vlan = 3612, SrcMAC = ec60-7336-fb53, SrcIP = 10.123.76.188, DstIP = 1.192.137.11 L4Protocol = 6, SrcPort = 49430, DstPort = 80, VrfIndex = 0

这段debugging 出来的意思

组网及组网描述：

最佳答案

zhiliao_sEUyB

zhiliao_sEUyB 九段

粉丝：228人关注：8人

Portal -- Portal调试命令 -- debugging portal

【命令】

debugging portal { all | error | event | fsm }

undo debugging portal { all | error | event | fsm }

all：表示所有Portal调试信息开关。

error：表示错误调试信息开关。

event：表示事件调试信息开关。

fsm：表示状态机调试信息开关。

【描述】

debugging portal命令用来打开Portal调试信息开关。undo debugging portal命令用来关闭Portal调试信息开关。

缺省情况下，Portal调试信息开关处于关闭状态。

表1-1 debugging portal error命令输出信息描述表

字段	描述
Failed to create the detection timer for portal server server-name.	创建Portal服务器探测定时器失败，Portal服务器名称为server-name
User (IP:user-ip) will log off because of no IP address assigned by the DHCP server.	由于未能成功被DHCP服务器分配IP地址，用户将被强制下线，用户IP地址为user-ip
Portal server didn't confirm the new IP. User will logoff.	Portal服务器在指定时间内没有确认更新的用户IP地址，该用户将被强制下线
Failed to start the timer for waiting for a new IP.	开启等待更新IP地址定时器失败
Failed to open the timer for confirming new IP.	开启确认新IP地址定时器失败
Failed to open the timer for waiting for ACK_NTF_LOGOUT.	开启等待ACK_NTF_LOGOUT报文定时器失败
Failed to send user-rule result.	向主控板发送添加用户规则的结果失败
Failed to send user traffic info.	向主控板发送用户流量信息失败
Failed to send mesh messages to all cards.	向所有板发送Mesh消息失败
Failed to send mesh messages to LPU.	向接口板发送Mesh消息失败
Failed to send mesh messages to MPUs.	向主控板发送Mesh消息失败
Failed to look up FIB info.	查找快转信息失败
Packet validity check failed because packet length and version did not match.	报文长度和版本均不匹配，报文合法性检查失败
Packet validity check failed due to invalid authenticator.	authenticator字段非法，报文合法性检查失败
Packet validity check failed due to failure of getting user access interface by user IP.	无法通过用户IP地址找到用户接入的接口，报文合法性检查失败
Unknown source of packet.	报文源未知
Failed to receive ICMP packet.	无法收到ICMP报文
Failed to open ICMP socket.	无法打开ICMP的套接字
Failed to send ICMP6 packet.	发送ICMPv6的报文失败
Failed to get ARP refresh time.	获取ARP更新时间失败
Failed to send ARP request.	发送ARP请求失败
Failed to get ND refresh time.	获取ND更新时间失败
Failed to find user while receiving accounting-update response.	收到计费更新回应时查找用户信息失败
Failed to create user because the user count reached the upper limit.	用户数量达到最大值，创建用户失败
Failed to create user for failing to get the physical info.	获取用户物理信息失败，创建用户失败
Failed to create user due to memory application failure.	申请用户资源失败，导致创建用户失败
Failed to find user for ACK_NTF_LOGOUT.	找不到用户信息来发送ACK_NTF_LOGOUT报文
Failed to find user for AFF_NTF_USERIPCHAN.	找不到用户信息来发送AFF_NTF_USERIPCHAN报文
ACL acl-number doesn't exist or ACL type is not supported.	ACL acl-number不存在，或ACL的类型不支持
Failed to set pam items for authentication.	设置用于认证的pam items失败
Failed to find user by MAC (mac-addr).	根据MAC地址没有找到用户
Failed to create PAM handle.	创建PAM handle失败
Failed to create DHCP client: Not enough memory.	内存不足导致创建DHCP租约表项失败
Failed to create DHCP client.	创建DHCP租约表项失败
Failed to create DHCPv6 client: Not enough memory.	因为内存不足，创建DHCPv6表项失败
Failed to create DHCPv6 client.	创建DHCPv6表项失败
Failed to create the pre-auth user: Not enough memory.	内存不足，创建认证前用户失败
Failed to create the pre-auth user: The user already existed.	用户已存在，创建认证前用户失败
Failed to create the pre-auth user: All-zero MAC address.	用户MAC地址为全0，创建认证前用户失败
Failed to get author info for pre-auth user.	无法获取认证前域中的授权信息，创建认证前用户失败

表1-2 debugging portal event 命令输出信息描述表

字段	描述
Portal server server-name turned to newstate state.	Portal服务器server-name状态变化为newstate，newstate包括以下取值： · UP：服务器可达 · DOWN：服务器不可达
Portal server server-name started detection.	Portal服务器server-name开启可达性探测功能
Portal server server-name refreshed detection timer.	Portal服务器server-name刷新探测定时器
Portal server server-name refreshed detection action because status is down when configuration was changed.	修改配置时，因为服务器server-name状态为down，所以服务器刷新了探测动作
Portal server server-name stopped detection.	Portal服务器server-name停止探测
Portal web-server server-name turned to newstate state.	Portal重定向服务器server-name状态变化为newstate，newstate包括以下取值： · UP：服务器可达 · DOWN：服务器不可达
Portal web-server server-name started detection.	Portal重定向服务器server-name开启可达性探测功能
Portal web-server server-name refreshed detection timer.	Portal重定向服务器server-name刷新探测定时器
Portal web-server server-name refreshed detection action for status is down when changing configuration.	修改配置时，因为重定向服务器server-name状态为down，所以服务器刷新了探测动作
Portal web-server server-name detecting stopped.	Portal重定向服务器server-name停止探测
Stopped the auth_sm timer.	关闭认证状态机定时器
The number of failures of receiving ACK_NTF_LOGOUTpacket reached the upper limit.	等待ACK_NTF_LOGOUT报文的次数达到最大值
Started the auth_sm timer, timeout=time sec.	打开认证状态机的定时器，定时器的值为time秒
User(IP:ip-addr) was not online when DHCP relay client information is deleted.	当DHCP relay用户表项被删除时，对应的用户不在线
Received an event event-id from VLAN vlan-id on interface interface-type interface-num.	接收到VLAN事件，事件ID为event-id，VLAN ID为vlan-id，,接口索引为ifindex
Portal Web server host name host-name, port port-num.	根据URL地址获取到Portal Web server的主机名为 host-name,、端口号为port-num
User-SM [ip-addr]	用户状态机[用户IP地址]
User-SM [ip-addr]: Received ICMP response successfully.	接收ICMP回应报文成功
User-SM [ip-addr]: Sent ICMP request successfully.	发送ICMP请求报文成功
User-SM [ip-addr]: Received ICMPv6 response successfully.	接收ICMPv6回应报文成功
User-SM [ip-addr]: Sent ICMPv6 request successfully.	发送ICMPv6请求报文成功
User-SM [ip-addr]: Sent ARP request successfully.	发送ARP请求报文成功
User-SM [ip-addr]: Sent ND request successfully.	发送ND请求报文成功
User-SM [ip-addr]: ARP entry refreshed.	ARP表项已刷新
User-SM [ip-addr]: ND entry refreshed.	ND表项已刷新
User-SM [ip-addr]: Number of detection attempts reached the upper limit.	探测次数到达最大值
User-SM [ip-addr]: Detection timer timed out and sent packet again.	探测定时器超时，重发探测报文
User-SM [ip-addr]: Started detect idle timer, timeout=time sec.	开启闲置探测定时器
User-SM [ip-addr]: Started detect waiting-response timer, timeout=time sec.	开启等待探测回应定时器
User-SM [ip-addr]: Stopped detect timer.	关闭探测定时器
User-SM [ip-addr]: Started detect function.	开启探测功能
User-SM [ip-addr]: Started idle-cut timer, timeout=time sec.	开启闲置切断定时器，定时器超时时长为time秒
User-SM [ip-addr]: Stopped idle-cut timer.	关闭闲置切断定时器
User-SM [ip-addr]: Idle-cut timer timed out and user will logoff.	闲置切断定时器超时，用户被强制下线
User-SM [ip-addr]: Started session-timeout timer, timeout= time(s).	打开会话超时定时器，定时器超时时长为time秒
User-SM [ip-addr]: Stopped session-timeout timer.	关闭会话超时定时器
User-SM [ip-addr]: Session timer timeout and user will logoff.	会话定时器超时，用户将被强制下线
User-SM [ip-addr]: Started user-sync timer, timeout=time sec.	开启用户同步定时器，定时器超时时长为time秒
User-SM [ip-addr]: Stopped user-sync timer.	关闭用户同步定时器
User-SM [ip-addr]: User-sync timer time out and user will logoff.	用户同步定时器超时，用户将被强制下线
User-SM [ip-addr]: Number of accounting-update attempts reached the upper limit.	计费更新的失败次数达到最大值
User-SM [ip-addr]: open accounting-update timer, timeout=time(s)	开启实时计费定时器，定时器超时时长为time秒
User-SM [ip-addr]: Close accounting-update timer.	关闭实时计费定时器
User-SM [ip-addr]: Number of accounting-update attempts without responses reached the upper limit.	实时计费更新报文无响应次数达到最大值
User-SM [ip-addr]: Notified User-Detect-SM to start detection.	通知detect-sm模块开启探测
User-SM [ip-addr]: Notify User-Detect-SM to stop detection.	通知detect-sm模块停止探测
User-SM [ip-addr]: Failed to find physical info for ack_info.	封装ACK_INFO报文时查找用户物理信息
User-SM [ip-addr]: Notified auth-sm to process the REQ_CHALLENGE packet.	通知认证状态机模块处理REQ_CHALLENGE报文
User-SM [ip-addr]: Notified auth-sm to process the REQ_AUTH packet.	通知认证状态机模块处理REQ_AUTH报文
User-SM [ip-addr]: Notified auth-sm to process the REQ_LOGOUT packet.	通知认证状态机模块处理REQ_LOGOUT报文
User-SM [ip-addr]: Notified auth-sm to process the ACK_NTF_LOGOUT packet.	通知认证状态机模块处理ACK_NTF_LOGOUT报文
User-SM [ip-addr]: Notified auth-sm to process the AFF_NTF_USERIPCHAN packet.	通知认证状态机模块处理AFF_NTF_USERIPCHAN报文
User-SM [ip-addr]: The new ACL acl-number authorized by policy server is the same as the old one.	策略服务器授权给用户的ACL号和之前授权过的相同
User-SM [ip-addr]: AAA processed authentication request and returned result-string.	AAA处理了认证请求并返回认证结果result-string，包括以下取值： · success：成功 · processing：处理中 · continue：继续 · failed：失败 · error：错误
User-SM [ip-addr]: AAA processed authorization request and returned result-string.	AAA处理了授权请求并返回授权结果result-string，包括以下取值： · success：成功 · processing：处理中 · failed：失败 · error：错误
User-SM [ip-addr]: AAA processed accounting-start request and returned result-string.	AAA处理了开始计费请求并返回计费结果result-string，包括以下取值： · processing：处理中 · 非processing：成功
User-SM [ip-addr]: AAA processed accounting-update request and returned result-string.	AAA处理了实时计费请求并返回计费结果result-string，包括以下取值： · success：成功 · processing：处理中 · failed：失败
User-SM [ip-addr]: AAA processed accounting-stop request and returned result-string.	AAA处理了停止计费请求并返回计费结果result-string，包括以下取值： · processing：处理中 · 非processing：成功
User-SM [ip-addr]: AUTH-SM logged out the user and notified USER-SM to do.]	认证状态机完成了用户下线处理，通知用户状态机继续处理
User-SM [ip-addr]: Auth-SM notified User-SM that user-ip updated.	认证状态机通知用户状态机，用户IP已更新
User-SM [ip-addr]: Received authentication response, RespCode=resp-code.	收到认证回应报文，回应代码为resp-code，包括以下取值： · 0：表示成功 · 26：表示失败
User-SM [ip-addr]: Received authorization response, RespCode=resp-code.	收到授权回应报文回应代码为resp-code，包括以下取值： · 0：表示成功 · 26：表示失败
User-SM [ip-addr]: Received accounting-start response.	收到开始计费回应报文
User-SM [ip-addr]: Received accounting-update response.	收到更新计费回应报文
User-SM [ip-addr]: Received accounting-stop response.	收到停止计费回应报文
User-SM [ip-addr]: Detection failed and user logged off.	用户探测失败，用户被强制下线
User-SM [ip-addr]: Received rule result result.	接收到用户规则下发结果为result，包括以下取值： · success：成功 · fail：失败
User-SM [ip-addr]: User is logging off now.	用户正在下线过程中
User-SM [ip-addr]: Notified Auth-SM to log user out.	通知认证状态机强制用户下线
User-SM [ip-addr]: Received set-policy COA/POD notification.	用户状态机接收到COA/POD通知，其中，COA用于授权变更，POD用于强制用户下线
User-SM [ip-addr]: Recover failed and user logged off.	获取用于恢复用户信息的数据失败，用户被强制下线
User-SM [ip-addr]: Receiving last traffic when user is logging off..	用户下线时，最后一次接收到流量更新消息
User-SM [ip-addr]: User IP changed.	用户IP变更
Received DHCP event: operation=event, IP=ip-addr, MAC=mac-addr, interface=ifname.	收到DHCP事件event，event包括以下取值： · Add：DHCP租约添加事件 · Del：DHCP租约删除事件 · Get：DHCP租约获取事件 BUTT：DHCP租约平滑结束事件
USER: Received a message for adding DHCP client (MAC=mac-addr, IP=ip-addr, Interface=ifname, VPN instance=vpn-instance).	收到DHCP租约创建消息（MAC地址为mac-addr，IP地址为ip-addr，接入接口为ifname，所属VPN实例为vpn-instance）
User-SM[ip-addr]: Added ARP rule.	为用户添加对应的ARP规则
User-SM[ip-addr]: Started User-SM timer (interval sec).	开启用户状态机定时器，超时时间为interval秒
User-SM[ip-addr]: Received deployment results of all rules.	收到所有用户规则下发的结果
User-SM[ip-addr]: Stopped User-SM timer.	关闭用户状态机定时器
User-SM[ip-addr]: Entered state: vsrp-state.	用户进入VRSP状态vsrp-state，状态取值如下： · vsrp_master：开始为VRSP双机主用户授权 · vsrp_master_ok：VRSP主用户授权完成 · vsrp_backup：开始为VRSP备用户授权 vsrp_backup_ok：VRSP备用户授权完成
Created pre-auth user for VSRP backup.	在VSRP备份设备上创建认证前用户
Can't create pre-auth user: Portal was disabled.	Portal未使能，不创建认证前用户
Can't create pre-auth user: No pre-auth domain configured.	接口未配置认证前域，不创建认证前用户
Inappropriate state. Dropped batch-user-backup message.	本机未处于VSRP双机稳态，丢弃批量备份用户数据的消息
Port and user not in the same VLAN.	接口所在VLAN与用户所属VLAN不一致
User-SM [ip-addr]: Deauthorized pre-auth user: User coming online.	用户认证上线，取消认证前域下发的授权
Can't create pre-auth user when user was offline because of unavailable port.	端口不可用，强制用户下线，且不创建认证前用户
Can't create pre-auth user: Unsupported portal-auth type.	Layer3方式的Portal认证不支持认证前域，不创建认证前用户
Can't create pre-auth user: Interface was not operating correctly.	接口工作状态不正常，不创建认证前用户
Can't create pre-auth user: VSRP was down on the interface.	VSRP状态为down，不创建认证前用户

表1-3 debugging portal fsm 命令输出信息描述表

字段	描述
AUTH_SM [ip-addr]: Entered state state.	认证状态机（用户IP地址为ip-addr）进入状态state，包括以下取值： · Authenticating：正在认证 · Authenticated：认证成功 · Continue：认证持续 · AssigningNewIP：等待分配IP地址 · AssignedNewIP：分配到IP地址 · Online：在线 · Waiting：强制下线状态，等待NTF_LOGOUT响应 · Offline：下线处理状态
Auth-SM: Started to run.	认证状态机开始运转
User_Detect_SM [ip-addr]: Entered state state.	用户探测状态机（用户IP地址为ip-addr）进入状态state，包括以下取值： · Detected：已探测状态 · Wait_Detect：等待探测状态 · Detecting：正在探测状态 · DetectFail：探测失败状态
User-SM [ip-addr]: State changed from old-state to new-state.	用户状态机状态发生变化（旧状态old-state -> 新状态new-state），状态包括以下取值： · Authenticating：正在认证 · Waiting_Author：等待授权结果 · Waiting_Rule_OK：等待规则下发结果 · Online：在线 · Offline_Waiting_Traffic：下线等待各板流量 · Offline_Waiting_Acctoff：等待停止计费回应 · Done：用户下线完成
User-SM [ip-addr]: Begin to run.	用户状态机开始运转
User-SM [ip-addr]: User deleted	用户被删除

【举例】

# 在一台配置了Portal的设备上打开Portal状态机调试信息开关，当有Portal用户上线时，将输出以下调试信息。

<Sysname> debug portal fsm

*Jan 7 00:06:44:214 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: Begin to run.

// 用户状态机开始运转，用户IP地址为197.197.197.1

*Jan 7 00:06:44:214 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Initial to Authenticating.

// 用户状态机从Initial切换为Authenticating状态

*Jan 7 00:06:44:219 2011 Sysname PORTAL/7/FSM:

Auth-SM: Started to run.

// 认证状态机开始运转

*Jan 7 00:06:44:220 2011 Sysname PORTAL/7/FSM:

Auth_SM[197.197.197.1]: Entered state Authenticating.

// 认证状态机进入Authenticating状态

User-SM[197.197.197.1]: Begin to run.

*Jan 7 00:06:44:645 2011 Sysname PORTAL/7/FSM

// 用户状态机不变

Auth-SM: Started to run.

*Jan 7 00:06:44:645 2011 Sysname PORTAL/7/FSM:

Auth_SM[197.197.197.1]: Entered state Authenticated.

// 用户状态机进入Authenticated状态

*Jan 7 00:06:44:646 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: Begin to run.

*Jan 7 00:06:44:646 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Authenticating to Waiting_Author.

*Jan 7 00:06:44:657 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Waiting_Author to Waiting_Rule_OK.

// 用户状态机首先切换为Waiting_Author，然后切换为Waiting_Rule_OK

*Jan 7 00:06:44:667 2011 Sysname PORTAL/7/FSM:

Auth-SM: Started to run.

*Jan 7 00:06:44:668 2011 Sysname PORTAL/7/FSM:

Auth_SM[197.197.197.1]: Entered state Online.

// 认证状态机进入Online状态

*Jan 7 00:06:44:670 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: Begin to run.

*Jan 7 00:06:44:671 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Waiting_Rule_OK to Online.

// 用户状态机切换为Online

*Jan 7 00:21:31:710 2011 Sysname PORTAL/7/FSM:

User-Detect-SM[197.197.197.1]: Entered state Initial.

// 用户状态机进入Iintial状态

User-Detect-SM[197.197.197.1]: Entered state Detected.

*Jan 7 00:21:32:469 2011 Sysname PORTAL/7/FSM:

// 用户探测状态机进入Detected状态

*Jan 7 00:35:16:169 2011 Sysname PORTAL/7/FSM:

Auth-SM: Started to run.

*Jan 7 00:35:16:170 2011 Sysname PORTAL/7/FSM:

Auth_SM[197.197.197.1]: Entered state Offline.

// 认证状态机进入Offline状态

*Jan 7 00:35:16:171 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: Begin to run.

*Jan 7 00:35:16:172 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Online to Offline_Waiting_Traffic.

// 用户状态机切换为Offline_Waiting_Traffic状态

*Jan 7 00:35:16:180 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: Begin to run.

*Jan 7 00:35:16:181 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Offline_Waiting_Traffic to Offline_Waiting_Acctoff.

// 用户状态机切换为Offline_Waiting_Accoff状态

*Jan 7 00:35:16:758 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: Begin to run.

*Jan 7 00:35:16:759 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: State changed from Offline_Waiting_Acctoff to Done.

// 用户状态机切换为Done状态

*Jan 7 00:35:16:759 2011 Sysname PORTAL/7/FSM:

User-SM[197.197.197.1]: User deleted.

// 用户被删除

# 在一台配置了Portal的设备上打开Portal事件调试信息开关，当有Portal用户上线时，将输出以下调试信息。

<Sysname> debug portal event

*Jan 7 00:38:37:954 2011 Sysname PORTAL/7/EVENT:

Auth-SM[197.197.197.1]: Started the auth_sm timer, timeout=15 sec.

// 开启认证状态机定时器，时长为15秒

*Jan 7 00:38:37:955 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Notified Auth-SM to process the REQ_CHALLENGE packet.

// 通知协议状态机处理REQ_CHALLENGE报文

*Jan 7 00:38:37:963 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Notified Auth-SM to process the REQ_AUTH packet.

// 通知协议状态机处理REQ_AUTH报文

*Jan 7 00:38:37:965 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: AAA processed authentication request and returned processing.

// AAA处理认证请求，并返回结果为正在处理

*Jan 7 00:38:38:425 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Received authentication response, RespCode=0.

// 收到AAA的认证回应消息，响应码为0

*Jan 7 00:38:38:436 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: AAA processed authorization request and returned success.

// AAA处理授权请求，返回结果为成功

*Jan 7 00:38:38:448 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Started User-SM timer, timeout=600 sec.

// 开启用户状态机定时器，时长为600秒

*Jan 7 00:38:38:451 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Received rule result success.

// 收到规则下发成功的消息

*Jan 7 00:38:38:452 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Stopped User-SM timer.

// 关闭用户状态机定时器

*Jan 7 00:38:38:453 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: AAA processed accounting-start request and returned proc

essing.

// AAA处理开始计费请求，并返回结果为正在处理

*Jan 7 00:38:38:455 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Started session-timeout timer, timeout=900902 sec.

// 开启会话超时定时器，时长为900902秒

*Jan 7 00:38:38:456 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Started idle-cut timer, timeout=600 sec.

// 开启Idle-cut定时器，时长为600秒

*Jan 7 00:38:38:457 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Notify User-Detect-SM detecting started.

*Jan 7 00:38:38:458 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: Start detect function.

// 通知用户探测状态机开启探测

*Jan 7 00:38:38:458 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: Started detect idle timer, length=60(sec).

// 开启探测闲置定时器，时长为60秒

*Jan 7 00:38:38:546 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Received accounting-start response.

// 收到开始计费回应消息

*Jan 7 00:38:38:549 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Started accounting-update timer, timeout=720 sec.

// 开启实时计费定时器，时长为720秒

*Jan 7 00:39:38:686 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: Stopped detect timer.

// 关闭探测定时器

*Jan 7 00:39:39:687 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: Sent ICMP request successfully.

// 发送ICMP请求报文成功

*Jan 7 00:58:49:689 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: Started detect waiting-response timer, timeout=3 sec.

// 开启等待探测回应定时器，时长为3秒

*Jan 7 00:58:52:687 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: ARP entry refreshed.

// 用户ARP表项刷新

User-Detect-SM[197.197.197.1]: Stopped detect timer.

*Jan 7 00:58:52:689 2011 Sysname PORTAL/7/EVENT:

// 关闭探测定时器

*Jan 7 01:00:36:547 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Notified Auth-SM to process the REQ_LOGOUT packet.

// 通知认证状态机处理REQ_LOGOUT报文

*Jan 7 01:00:36:549 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Auth-SM logged out the user and notified User-SM to proce.

// 认证状态机处理完成，通知用户状态机处理

*Jan 7 01:00:36:556 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Started User-SM timer, timeout=60 sec.

// 开启用户状态机定时器，时长为60秒

*Jan 7 01:00:36:562 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Receiving last traffic when offline.

// 获取用户的流量信息

*Jan 7 01:00:36:562 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Stopped User-SM timer.

// 关闭用户状态机定时器

*Jan 7 01:00:36:563 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: AAA processed accounting-stop request and returned processing.

// AAA处理停止计费请求，并返回结果为正在处理

*Jan 7 01:00:36:563 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Started User-SM timer, timeout=60 sec.

// 开启用户状态机定时器，时长为60秒

*Jan 7 01:00:37:169 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Received accounting-stop response.

// 收到计费停止响应报文

*Jan 7 01:00:37:170 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Stopped User-SM timer.

// 关闭用户状态机定时器

*Jan 7 01:00:37:172 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Stopped session-timeout timer.

// 关闭会话超时定时器

*Jan 7 01:00:37:172 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Stopped idle-cut timer.

// 关闭Idle-cut定时器

*Jan 7 01:00:37:173 2011 Sysname PORTAL/7/EVENT:

User-SM[197.197.197.1]: Notify User-Detect-SM detecting stopped.

// 通知用户探测状态机关闭探测功能

*Jan 7 01:00:37:174 2011 Sysname PORTAL/7/EVENT:

User-Detect-SM[197.197.197.1]: Stopped detect timer.

// 关闭探测定时器

# 在一台指定了Portal认证前域的设备上打开Portal事件调试信息开关，当有用户申请地址时，因为指定的Portal认证前域不存在，将输出以下调试信息。

<Sysname> debug portal event

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/EVENT: -MDC=1;

Received DHCP event: operation=Add, IP=0x12120001, MAC=1cbd-b9e3-b0ed, interface=GigabitEthernet1/0/3.

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/EVENT: -MDC=1;

USER: Received a message for adding DHCP client (MAC=1cbd-b9e3-b0ed, IP=18.18.0.1, Interface=GigabitEthernet1/0/3, VPN instance=).

// 收到DHCP上报的租约创建事件

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/ERROR: -MDC=1;

Failed to find user by MAC (1cbd-b9e3-b0ed).

// 根据上报租约的MAC地址找不到用户

*Sep 24 06:29:31:933 2014 Sysname PORTAL/7/ERROR: -MDC=1;

Failed to get author info for pre-auth user.

// 获取认证前域授权信息失败，创建认证前用户失败

# 在一台配置了Portal认证前域的设备上打开Portal事件调试信息开关，当有用户申请地址时，将输出以下调试信息。

<Sysname> debug portal event

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/EVENT: -MDC=1;

Received DHCP event: operation=Add, IP=0x12120001, MAC=1cbd-b9e3-b0ed, interface=GigabitEthernet1/0/3.

// 收到DHCP上报的租约创建事件

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/EVENT: -MDC=1;

USER: Received a message for adding DHCP client (MAC=1cbd-b9e3-b0ed, IP=18.18.0.1, Interface=GigabitEthernet1/0/3, VPN instance=).

// 收到DHCP上报的租约创建事件

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/ERROR: -MDC=1;

Failed to find user by MAC (1cbd-b9e3-b0ed).

// 根据租约找不到对应用户

*Sep 24 06:29:31:923 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Added ARP rule.

// 添加ARP规则

*Sep 24 06:29:31:924 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Added user rule.

// 添加认证前用户规则

*Sep 24 06:29:31:933 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Started User-SM timer (600 sec).

// 开启规则等待定时器

*Sep 24 06:29:31:944 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Received deployment results of all rules.

// 收到规则下发结果

*Sep 24 06:29:31:945 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Stopped User-SM timer.

// 停止规则等待定时器

*Sep 24 06:29:31:945 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Entered state vsrp_master.

// 进入授权下发状态

*Sep 24 06:29:31:946 2014 Sysname PORTAL/7/EVENT: -MDC=1;

User-SM[18.18.0.1]: Entered state vsrp_master_ok.

// 授权下发完成

暂无评论

1 个回答

按时间按赞数

学道

学道七段

粉丝：6人关注：1人

入站规则完全匹配，然后是源ip，mac啥的信息

暂无评论

编辑答案

分享扩散:

➤

网站相关: 关于我们; 服务条款; 帮助中心; 经验与权限; 积分规则

联系我们: 联系我们; 建议反馈

常用链接: 标杆的神器下载

关注我们: H3C官网; 新华三服务公众号; 安仔远程运维服务; 新华三商城

内容许可: 除特别说明外，用户内容均可采用知识共享署名-相同方式共享3.0中国大陆许可协议进行许可

本图标版权归新华三集团所有，仅限本社区使用，切勿用做商业目的，违者必究

浙ICP备09064986号-1 浙公网安备 33010802004416号

✖

亲~登录后才可以操作哦!

确定

✖

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

✖

你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作

✖

侵犯我的权益 >

对根叔社区有害的内容 >

辱骂、歧视、挑衅等（不友善）

侵犯我的权益

泄露了我的隐私 >

侵犯了我企业的权益 >

抄袭了我的内容 >

诽谤我 >

辱骂、歧视、挑衅等（不友善）

骚扰我

泄露了我的隐私

您好，当您发现根叔知了上有泄漏您隐私的内容时，您可以向根叔知了进行举报。请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱，我们会尽快处理。

1. 您认为哪些内容泄露了您的隐私？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
2. 您是谁？（身份证明材料，可以是身份证或护照等证件）

侵犯了我企业的权益

您好，当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时，您可以向根叔知了进行举报。请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱，我们会在审核后尽快给您答复。

1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
3. 是哪家企业？（营业执照，单位登记证明等证件）
4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）

我们认为知名企业应该坦然接受公众讨论，对于答案中不准确的部分，我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

原文链接或出处

诽谤我

您好，当您发现根叔知了上有诽谤您的内容时，您可以向根叔知了进行举报。请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱，我们会尽快处理。

1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
2. 您是谁？（身份证明材料，可以是身份证或护照等证件）

我们认为知名企业应该坦然接受公众讨论，对于答案中不准确的部分，我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

垃圾广告信息

色情、暴力、血腥等违反法律法规的内容

政治敏感

不规范转载 >

辱骂、歧视、挑衅等（不友善）

骚扰我

诱导投票

不规范转载

举报说明

产品线		搜索取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式	默认策略匹配全词匹配整句

portal debugging 报文的意思

问题描述：

组网及组网描述：

编辑答案

提出建议