RADIUS：记帐未建立会话

网络工程 半径 华为
2022-02-26 19:27:21

我正在使用华为 Ne20 和 FreeRadius，最后一个已用于验证 Mikrotik 帐户。

我收到身份验证接受消息，但未初始化记帐会话。

这是华为调试。身份验证已初始化，但华为似乎没有回答计费，radius 发送带有 Acct-Status-Type [START] 的数据包和下一个数据包，标志机会为 [STOP]

Nov 23 18:55:36 172.16.97.2 Nov 24 2018 04:56:55.778 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  Radius Sent a Packet
  Server Template: 1
  Server IP   : 172.16.72.6
  NAS IP      : 172.16.72.90
  Vpn-Instance: -
  Server Port : 1812
  NAS Port    : 1812
  Protocol: Standard
  Code    : Authentication request
  Len     : 286
  ID      : 156
  [User-Name(1)                       ] [9 ] [usertest]
  [User-Password(2)                   ] [18] [******]
  [NAS-Port(5)                        ] [6 ] [3153920]
  [NAS-IP-Address(4)                  ] [6 ] [172.16.72.90]
  [Service-Type(6)                    ] [6 ] [2] [Framed]
  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]
  [Calling-Station-Id(31)             ] [19] [18:66:da:fe:c7:a9]
  [NAS-Identifier(32)                 ] [9 ] [CERBERO]
  [NAS-Port-Type(61)                  ] [6 ] [15] [Ethernet]
  [NAS-Port-Id(87)                    ] [35] [slot=0;subslot=3;port=2;vlanid=0;]
Nov 23 18:55:36 172.16.97.2 Nov 24 2018 04:56:55.778 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [Acct-Session-Id(44)                ] [35] [CERBERO0030200000000095bc60002040]
  [Connect-Info(77)                   ] [12] [1000000000]
  [HW-NAS-Startup-Time-Stamp(Huawei-59)] [6 ] [1542664036]
  [HW-IP-Host-Address(Huawei-60)      ] [35] [255.255.255.255 18:66:da:fe:c7:a9]
  [HW-Connect-ID(Huawei-26)           ] [6 ] [8256]
  [HW-Version(Huawei-254)             ] [14] [Huawei NE20E]
  [HW-Product-ID(Huawei-255)          ] [7 ] [NE20E]
  [HW-Domain-Name(Huawei-138)         ] [6 ] [domain-test]
  [HW-User-Mac(Huawei-153)            ] [19] [18:66:da:fe:c7:a9]
Nov 23 18:55:37 172.16.97.2 Nov 24 2018 04:56:55.829 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  Radius Received a Packet
  Server Template: 1
  Server IP   : 172.16.72.6
  NAS IP      : 172.16.72.90
  Vpn-Instance: -
  Server Port : 1812
  NAS Port    : 1812
  Protocol: Standard
  Code    : Authentication accept
  Len     : 50
  ID      : 156
  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]
  [Unknown-attr(13)                   ] [6 ] [00000001]
  [Acct-Interim-Interval(85)          ] [6 ] [900]
  [Unknown-attr(9-37)                 ] [6 ] [474f4c44]
Nov 23 18:55:37 172.16.97.2 Nov 24 2018 04:56:55.873 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  Radius Sent a Packet
  Server Template: 1
  Server IP   : 172.16.72.6
  NAS IP      : 172.16.72.90
  Vpn-Instance: -
  Server Port : 1813
  NAS Port    : 1813
  Protocol: Standard
  Code    : Account request
  Len     : 312
  ID      : 18
  [User-Name(1)                       ] [9 ] [usertest]
  [NAS-Port(5)                        ] [6 ] [3153920]
  [NAS-IP-Address(4)                  ] [6 ] [172.16.72.90]
  [Framed-IP-Address(8)               ] [6 ] [10.0.0.2]
  [NAS-Identifier(32)                 ] [9 ] [CERBERO]
  [Acct-Status-Type(40)               ] [6 ] [1] [Start]
  [Acct-Delay-Time(41)                ] [6 ] [0]
  [Acct-Session-Id(44)                ] [35] [CERBERO0030200000000095bc60002040]
  [Acct-Authentic(45)                 ] [6 ] [1] [RADIUS]
  [Event-Timestamp(55)                ] [6 ] [1543035415] [2018-11-24 04:56:55]
Nov 23 18:55:37 172.16.97.2 Nov 24 2018 04:56:55.873 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [NAS-Port-Type(61)                  ] [6 ] [15] [Ethernet]
  [Calling-Station-Id(31)             ] [19] [18:66:da:fe:c7:a9]
  [NAS-Port-Id(87)                    ] [35] [slot=0;subslot=3;port=2;vlanid=0;]
  [Service-Type(6)                    ] [6 ] [2] [Framed]
  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]
  [Connect-Info(77)                   ] [12] [1000000000]
  [Idle-Timeout(28)                   ] [6 ] [0]
  [Session-Timeout(27)                ] [6 ] [0]
  [HW-IP-Host-Address(Huawei-60)      ] [34] [10.0.0.2 18:66:da:fe:c7:a9]
  [HW-Priority(Huawei-22)             ] [6 ] [15] [Unchangeable]
  [HW-Connect-ID(Huawei-26)           ] [6 ] [8256]
  [HW-Domain-Name(Huawei-138)         ] [6 ] [domain-test]
  [HW-Accounting-Level(Huawei-84)     ] [6 ] [0]
  [HW-Up-Priority(Huawei-61)          ] [6 ] [15] [Unchangeable]
Nov 23 18:55:37 172.16.97.2 Nov 24 2018 04:56:55.873 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [HW-Down-Priority(Huawei-62)        ] [6 ] [15] [Unchangeable]
  [HW-User-Mac(Huawei-153)            ] [19] [18:66:da:fe:c7:a9]
  [HW-Acct-Update-Address(Huawei-159) ] [6 ] [0]
Nov 23 18:55:42 172.16.97.2 Nov 24 2018 04:57:00.839 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  Radius Sent a Packet
  Server Template: 1
  Server IP   : 172.16.72.6
  NAS IP      : 172.16.72.90
  Vpn-Instance: -
  Server Port : 1813
  NAS Port    : 1813
  Protocol: Standard
  Code    : Account request
  Len     : 312
  ID      : 19
  [User-Name(1)                       ] [9 ] [usertest]
  [NAS-Port(5)                        ] [6 ] [3153920]
  [NAS-IP-Address(4)                  ] [6 ] [172.16.72.90]
  [Framed-IP-Address(8)               ] [6 ] [10.0.0.2]
  [NAS-Identifier(32)                 ] [9 ] [CERBERO]
  [Acct-Status-Type(40)               ] [6 ] [1] [Start]
  [Acct-Delay-Time(41)                ] [6 ] [4]
  [Acct-Session-Id(44)                ] [35] [CERBERO0030200000000095bc60002040]
  [Acct-Authentic(45)                 ] [6 ] [1] [RADIUS]
  [Event-Timestamp(55)                ] [6 ] [1543035415] [2018-11-24 04:56:55]
Nov 23 18:55:42 172.16.97.2 Nov 24 2018 04:57:00.839 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [NAS-Port-Type(61)                  ] [6 ] [15] [Ethernet]
  [Calling-Station-Id(31)             ] [19] [18:66:da:fe:c7:a9]
  [NAS-Port-Id(87)                    ] [35] [slot=0;subslot=3;port=2;vlanid=0;]
  [Service-Type(6)                    ] [6 ] [2] [Framed]
  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]
  [Connect-Info(77)                   ] [12] [1000000000]
  [Idle-Timeout(28)                   ] [6 ] [0]
  [Session-Timeout(27)                ] [6 ] [0]
  [HW-IP-Host-Address(Huawei-60)      ] [34] [10.0.0.2 18:66:da:fe:c7:a9]
  [HW-Priority(Huawei-22)             ] [6 ] [15] [Unchangeable]
  [HW-Connect-ID(Huawei-26)           ] [6 ] [8256]
  [HW-Domain-Name(Huawei-138)         ] [6 ] [domain-test]
  [HW-Accounting-Level(Huawei-84)     ] [6 ] [0]
  [HW-Up-Priority(Huawei-61)          ] [6 ] [15] [Unchangeable]
Nov 23 18:55:42 172.16.97.2 Nov 24 2018 04:57:00.839 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [HW-Down-Priority(Huawei-62)        ] [6 ] [15] [Unchangeable]
  [HW-User-Mac(Huawei-153)            ] [19] [18:66:da:fe:c7:a9]
  [HW-Acct-Update-Address(Huawei-159) ] [6 ] [0]
Nov 23 18:55:47 172.16.97.2 Nov 24 2018 04:57:05.836 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  Radius Sent a Packet
  Server Template: 1
  Server IP   : 172.16.72.6
  NAS IP      : 172.16.72.90
  Vpn-Instance: -
  Server Port : 1813
  NAS Port    : 1813
  Protocol: Standard
  Code    : Account request
  Len     : 396
  ID      : 20
  [User-Name(1)                       ] [9 ] [usertest]
  [NAS-Port(5)                        ] [6 ] [3153920]
  [NAS-IP-Address(4)                  ] [6 ] [172.16.72.90]
  [Framed-IP-Address(8)               ] [6 ] [10.0.0.2]
  [NAS-Identifier(32)                 ] [9 ] [CERBERO]
  [Acct-Status-Type(40)               ] [6 ] [2] [Stop]
  [Acct-Delay-Time(41)                ] [6 ] [0]
  [Acct-Input-Octets(42)              ] [6 ] [162640]
  [Acct-Output-Octets(43)             ] [6 ] [143687]
  [Acct-Session-Id(44)                ] [35] [CERBERO0030200000000095bc60002040]
Nov 23 18:55:47 172.16.97.2 Nov 24 2018 04:57:05.836 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [Acct-Authentic(45)                 ] [6 ] [1] [RADIUS]
  [Acct-Session-Time(46)              ] [6 ] [0]
  [Acct-Input-Packets(47)             ] [6 ] [296]
  [Acct-Output-Packets(48)            ] [6 ] [255]
  [Acct-Terminate-Cause(49)           ] [6 ] [10] [NAS Request]
  [Acct-Input-Gigawords(52)           ] [6 ] [0]
  [Acct-Output-Gigawords(53)          ] [6 ] [0]
  [Event-Timestamp(55)                ] [6 ] [1543035425] [2018-11-24 04:57:05]
  [NAS-Port-Type(61)                  ] [6 ] [15] [Ethernet]
  [Calling-Station-Id(31)             ] [19] [18:66:da:fe:c7:a9]
  [NAS-Port-Id(87)                    ] [35] [slot=0;subslot=3;port=2;vlanid=0;]
  [Service-Type(6)                    ] [6 ] [2] [Framed]
  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]
  [Connect-Info(77)                   ] [12] [1000000000]
  [Idle-Timeout(28)                   ] [6 ] [0]
Nov 23 18:55:47 172.16.97.2 Nov 24 2018 04:57:05.836 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [Session-Timeout(27)                ] [6 ] [0]
  [HW-IP-Host-Address(Huawei-60)      ] [34] [10.0.0.2 18:66:da:fe:c7:a9]
  [HW-Priority(Huawei-22)             ] [6 ] [15] [Unchangeable]
  [HW-Connect-ID(Huawei-26)           ] [6 ] [8256]
  [HW-Domain-Name(Huawei-138)         ] [6 ] [domain-test]
  [HW-Accounting-Level(Huawei-84)     ] [6 ] [0]
  [HW-Up-Priority(Huawei-61)          ] [6 ] [15] [Unchangeable]
  [HW-Down-Priority(Huawei-62)        ] [6 ] [15] [Unchangeable]
  [HW-Acct-ipv6-Input-Octets(Huawei-144)] [6 ] [0]
  [HW-Acct-ipv6-Output-Octets(Huawei-145)] [6 ] [0]
  [HW-Acct-ipv6-Input-Packets(Huawei-146)] [6 ] [0]
  [HW-Acct-ipv6-Output-Packets(Huawei-147)] [6 ] [0]
  [HW-Acct-ipv6-Input-Gigawords(Huawei-148)] [6 ] [0]
  [HW-Acct-ipv6-Output-Gigawords(Huawei-149)] [6 ] [0]
  [HW-User-Mac(Huawei-153)            ] [19] [18:66:da:fe:c7:a9]
Nov 23 18:55:47 172.16.97.2 Nov 24 2018 04:57:05.836 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [HW-Acct-Update-Address(Huawei-159) ] [6 ] [0]
Nov 23 18:55:51 172.16.97.2 Nov 24 2018 04:57:10.835 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  Radius Sent a Packet
  Server Template: 1
  Server IP   : 172.16.72.6
  NAS IP      : 172.16.72.90
  Vpn-Instance: -
  Server Port : 1813
  NAS Port    : 1813
  Protocol: Standard
  Code    : Account request
  Len     : 396
  ID      : 21
  [User-Name(1)                       ] [9 ] [usertest]
  [NAS-Port(5)                        ] [6 ] [3153920]
  [NAS-IP-Address(4)                  ] [6 ] [172.16.72.90]
  [Framed-IP-Address(8)               ] [6 ] [10.0.0.2]
  [NAS-Identifier(32)                 ] [9 ] [CERBERO]
  [Acct-Status-Type(40)               ] [6 ] [2] [Stop]
  [Acct-Delay-Time(41)                ] [6 ] [5]
  [Acct-Input-Octets(42)              ] [6 ] [162640]
  [Acct-Output-Octets(43)             ] [6 ] [143687]
  [Acct-Session-Id(44)                ] [35] [CERBERO0030200000000095bc60002040]
Nov 23 18:55:51 172.16.97.2 Nov 24 2018 04:57:10.835 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [Acct-Authentic(45)                 ] [6 ] [1] [RADIUS]
  [Acct-Session-Time(46)              ] [6 ] [0]
  [Acct-Input-Packets(47)             ] [6 ] [296]
  [Acct-Output-Packets(48)            ] [6 ] [255]
  [Acct-Terminate-Cause(49)           ] [6 ] [10] [NAS Request]
  [Acct-Input-Gigawords(52)           ] [6 ] [0]
  [Acct-Output-Gigawords(53)          ] [6 ] [0]
  [Event-Timestamp(55)                ] [6 ] [1543035425] [2018-11-24 04:57:05]
  [NAS-Port-Type(61)                  ] [6 ] [15] [Ethernet]
  [Calling-Station-Id(31)             ] [19] [18:66:da:fe:c7:a9]
  [NAS-Port-Id(87)                    ] [35] [slot=0;subslot=3;port=2;vlanid=0;]
  [Service-Type(6)                    ] [6 ] [2] [Framed]
  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]
  [Connect-Info(77)                   ] [12] [1000000000]
  [Idle-Timeout(28)                   ] [6 ] [0]
Nov 23 18:55:51 172.16.97.2 Nov 24 2018 04:57:10.835 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [Session-Timeout(27)                ] [6 ] [0]
  [HW-IP-Host-Address(Huawei-60)      ] [34] [10.0.0.2 18:66:da:fe:c7:a9]
  [HW-Priority(Huawei-22)             ] [6 ] [15] [Unchangeable]
  [HW-Connect-ID(Huawei-26)           ] [6 ] [8256]
  [HW-Domain-Name(Huawei-138)         ] [6 ] [domain-test]
  [HW-Accounting-Level(Huawei-84)     ] [6 ] [0]
  [HW-Up-Priority(Huawei-61)          ] [6 ] [15] [Unchangeable]
  [HW-Down-Priority(Huawei-62)        ] [6 ] [15] [Unchangeable]
  [HW-Acct-ipv6-Input-Octets(Huawei-144)] [6 ] [0]
  [HW-Acct-ipv6-Output-Octets(Huawei-145)] [6 ] [0]
  [HW-Acct-ipv6-Input-Packets(Huawei-146)] [6 ] [0]
  [HW-Acct-ipv6-Output-Packets(Huawei-147)] [6 ] [0]
  [HW-Acct-ipv6-Input-Gigawords(Huawei-148)] [6 ] [0]
  [HW-Acct-ipv6-Output-Gigawords(Huawei-149)] [6 ] [0]
  [HW-User-Mac(Huawei-153)            ] [19] [18:66:da:fe:c7:a9]
Nov 23 18:55:51 172.16.97.2 Nov 24 2018 04:57:10.835 CERBERO %%01BRASRDS/7/BRRDS_DBG_PACKET(d):VS=Admin-VS-CID=0x8398041c;
  [HW-Acct-Update-Address(Huawei-159) ] [6 ] [0]

我去嗅探Radius里面，但这里似乎不同，Radius似乎没有回答华为初始化的会计。

在此处输入图像描述

**即使你们也没有针对此特定供应商的解决方案，请告诉我是否与其他供应商发生这种情况。**

更新

华为配置：

radius-server group testGROUP
 radius-server shared-key-cipher %^%#IK"53fC*k)_tVf3`,*FQmrAqAld%<-rHS~7O@CB3%^%#    
 radius-server authentication 172.16.72.6 1812 weight 0 
 radius-server accounting 172.16.72.6 1813 weight 0 
 radius-server accounting retransmit 3 timeout 3 
 undo radius-server user-name domain-included
 radius-server test-aaa accounting-start-packet send

 authentication-scheme default
  authentication-mode local radius

 accounting-scheme testAccounting
  accounting send-update

domain testDomain
  authentication-scheme default
  accounting-scheme testAccounting
  radius-server group testGROUP
  ip-pool pool1

interface Virtual-Template0
 ppp authentication-mode auto

interface GigabitEthernet0/3/2
 undo shutdown
 pppoe-server bind Virtual-Template 0
 undo dcn
 bas
 #
  access-type layer2-subscriber default-domain authentication testDomain
 #
#
1个回答

显然，计费会话正在创建一个 33 字节的 id，而 Radius 不接受它，这解释了他忽略华为发起的计费的原因。

acct-session-id-version是默认值（版本 1），更改为版本 3 后，会计被接受。

其它你可能感兴趣的问题
上一篇当 TCP SACK 已经启用时，再次丢失 下一篇汇聚层交换机IP域名