• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

交换机做radius计费

2小时前提问
  • 0关注
  • 0收藏,34浏览
零段
粉丝:0人 关注:0人

问题描述:

配置后radius服务器没收到计费报文呢

Ready to process requests

(27) Received Access-Request Id 90 from 1.1.1.24:34689 to 10.10.11.183:1812 length 359

(27)   User-Name = "test"

(27)   NAS-Identifier = "jieru11024"

(27)   CHAP-Challenge = 0x03de40fb76922f1712a687c3135e0a64

(27)   CHAP-Password = 0x84b79cae88dad288e5733a1b02c8f60ccd

(27)   Framed-Protocol = PPP

(27)   Called-Station-Id = "88-2A-5E-D7-EC-C6"

(27)   NAS-Port-Type = Ethernet

(27)   Framed-IP-Address = 172.10.10.39

(27)   H3C-Ip-Host-Addr = "172.10.10.39 e8:6a:64:a9:19:97"

(27)   Attr-26.25506.230 = 0x4769676162697445746865726e6574312f302f37

(27)   NAS-Port = 16805898

(27)   NAS-Port-Id = "slot=1;subslot=0;port=7;vlanid=10"

(27)   Attr-26.25506.210 = 0x6e61733a6966696e6465783d37

(27)   Acct-Session-Id = "00000004202601160725120000015908101102"

(27)   NAS-IP-Address = 1.1.1.24

(27)   Calling-Station-Id = "E8-6A-64-A9-19-97"

(27)   Service-Type = Framed-User

(27)   H3C-Product-ID = "H3C S5110V2-28P-SI"

(27)   H3C-NAS-Startup-Timestamp = 1356998406

(27) # Executing section authorize from file /etc/raddb/sites-enabled/default

(27)   authorize {

(27)     policy filter_username {

(27)       if (&User-Name) {

(27)       if (&User-Name)  -> TRUE

(27)       if (&User-Name)  {

(27)         if (&User-Name =~ / /) {

(27)         if (&User-Name =~ / /)  -> FALSE

(27)         if (&User-Name =~ /@[^@]*@/ ) {

(27)         if (&User-Name =~ /@[^@]*@/ )  -> FALSE

(27)         if (&User-Name =~ /\.\./ ) {

(27)         if (&User-Name =~ /\.\./ )  -> FALSE

(27)         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {

(27)         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE

(27)         if (&User-Name =~ /\.$/)  {

(27)         if (&User-Name =~ /\.$/)   -> FALSE

(27)         if (&User-Name =~ /@\./)  {

(27)         if (&User-Name =~ /@\./)   -> FALSE

(27)       } # if (&User-Name)  = notfound

(27)     } # policy filter_username = notfound

(27)     [preprocess] = ok

(27) chap:   &control:Auth-Type := CHAP

(27)     [chap] = ok

(27)     [mschap] = noop

(27)     [digest] = noop

(27) suffix: Checking for suffix after "@"

(27) suffix: No '@' in User-Name = "test", looking up realm NULL

(27) suffix: No such realm "NULL"

(27)     [suffix] = noop

(27) eap: No EAP-Message, not doing EAP

(27)     [eap] = noop

(27) files: users: Matched entry test at line 137

(27)     [files] = ok

(27) sql: EXPAND %{User-Name}

(27) sql:    --> test

(27) sql: SQL-User-Name set to 'test'

rlm_sql (sql): Closing connection (49): Hit idle_timeout, was idle for 61 seconds

rlm_sql (sql): You probably need to lower "min"

rlm_sql_mysql: Socket destructor called, closing socket

rlm_sql (sql): Closing connection (48): Hit idle_timeout, was idle for 61 seconds

rlm_sql (sql): You probably need to lower "min"

rlm_sql_mysql: Socket destructor called, closing socket

rlm_sql (sql): 0 of 0 connections in use.  You  may need to increase "spare"

rlm_sql (sql): Opening additional connection (50), 1 of 32 pending slots used

rlm_sql_mysql: Starting connect to MySQL server

rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.5.68-MariaDB, protocol version 10

rlm_sql (sql): Reserved connection (50)

(27) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id

(27) sql:    --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id

(27) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id

(27) sql: User found in radcheck table

(27) sql: Conditional check items matched, merging assignment check items

(27) sql:   Cleartext-Password := "test"

(27) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id

(27) sql:    --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id

(27) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id

(27) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority

(27) sql:    --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority

(27) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority

(27) sql: User not found in any groups

rlm_sql (sql): Released connection (50)

Need 2 more connections to reach min connections (3)

rlm_sql (sql): Opening additional connection (51), 1 of 31 pending slots used

rlm_sql_mysql: Starting connect to MySQL server

rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.5.68-MariaDB, protocol version 10

(27)     [sql] = ok

(27)     [expiration] = noop

(27)     [logintime] = noop

(27) pap: WARNING: Auth-Type already set.  Not setting to PAP

(27)     [pap] = noop

(27)   } # authorize = ok

(27) Found Auth-Type = CHAP

(27) # Executing group from file /etc/raddb/sites-enabled/default

(27)   Auth-Type CHAP {

(27) chap: Comparing with "known good" Cleartext-Password

(27) chap: CHAP user "test" authenticated successfully

(27)     [chap] = ok

(27)   } # Auth-Type CHAP = ok

(27) # Executing section post-auth from file /etc/raddb/sites-enabled/default

(27)   post-auth {

(27)     update {

(27)       No attributes updated

(27)     } # update = noop

(27) sql: EXPAND .query

(27) sql:    --> .query

(27) sql: Using query template 'query'

rlm_sql (sql): Reserved connection (50)

(27) sql: EXPAND %{User-Name}

(27) sql:    --> test

(27) sql: SQL-User-Name set to 'test'

(27) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')

(27) sql:    --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', '0x84b79cae88dad288e5733a1b02c8f60ccd', 'Access-Accept', '2026-01-16 15:50:27.237902')

(27) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', '0x84b79cae88dad288e5733a1b02c8f60ccd', 'Access-Accept', '2026-01-16 15:50:27.237902')

(27) sql: SQL query returned: success

(27) sql: 1 record(s) updated

rlm_sql (sql): Released connection (50)

(27)     [sql] = ok

(27)     [exec] = noop

(27)     policy remove_reply_message_if_eap {

(27)       if (&reply:EAP-Message && &reply:Reply-Message) {

(27)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE

(27)       else {

(27)         [noop] = noop

(27)       } # else = noop

(27)     } # policy remove_reply_message_if_eap = noop

(27)   } # post-auth = ok

(27) Sent Access-Accept Id 90 from 10.10.11.183:1812 to 1.1.1.24:34689 length 0

(27) Finished request

Waking up in 4.9 seconds.

 

1 个回答
粉丝:139人 关注:10人

网络通吗,密钥配置的有没有问题

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明