ru.cisco

 
 - RU.CISCO ---------------------------------------------------------------------
 From : news.fido7.ru                        2:5020/400     20 Feb 2003  00:12:03
 To : All
 Subject : RADIUS accounitng problem
 -------------------------------------------------------------------------------- 
 

 Добрый день !
 Возникла непонятная проблема при использовании связки:
 NAS - CISCO 5300, 5350 - RADIUS-сервер
 2 циски указаны потому, что пробовали на обеих, результат - тот же,
 в то же время 2511, 3640 работают с тем же радиус-сервером при
 такой же конфигурации не один год.
 
 Проблема вот в чем: Циска не может раскодировать Accounting response-пакеты
 от РАДИУСа.
 В лог пишет вот что:
 
 Feb 19 17:46:08 ip135 1951: *Feb 19 17:43:49: RADIUS: Initial Transmit tty62
 id 172 195.5.22.130:1646, Accounting-Request, len 106
 Feb 19 17:46:08 ip135 1952: *Feb 19 17:43:49:         Attribute 4 6 C3051687
 Feb 19 17:46:08 ip135 1953: *Feb 19 17:43:49:         Attribute 5 6 0000003E
 Feb 19 17:46:08 ip135 1954: *Feb 19 17:43:49:         Attribute 61 6
 00000005
 Feb 19 17:46:08 ip135 1955: *Feb 19 17:43:49:         Attribute 1 8 6964616C
 Feb 19 17:46:08 ip135 1956: *Feb 19 17:43:49:         Attribute 31 14
 3139352E
 Feb 19 17:46:08 ip135 1957: *Feb 19 17:43:49:         Attribute 40 6
 00000002
 Feb 19 17:46:08 ip135 1958: *Feb 19 17:43:49:         Attribute 45 6
 00000002
 Feb 19 17:46:08 ip135 1959: *Feb 19 17:43:49:         Attribute 6 6 00000007
 Feb 19 17:46:08 ip135 1960: *Feb 19 17:43:49:         Attribute 44 10
 30303030
 Feb 19 17:46:08 ip135 1961: *Feb 19 17:43:49:         Attribute 46 6
 00000145
 Feb 19 17:46:08 ip135 1962: *Feb 19 17:43:49:         Attribute 49 6
 00000001
 Feb 19 17:46:08 ip135 1963: *Feb 19 17:43:49:         Attribute 41 6
 00000000
 Feb 19 17:46:08 ip135 1964: *Feb 19 17:43:50: RADIUS: Received from id 172
 195.5.22.130:1646, Accounting-response, len 20
 Feb 19 17:46:09 ip135 1965: *Feb 19 17:43:50: RADIUS: Response (172) failed
 decrypt
 Feb 19 17:46:14 ip135 1966: *Feb 19 17:43:54: RADIUS: Retransmit id 172
 Feb 19 17:46:14 ip135 1967: *Feb 19 17:43:54: RADIUS: acct-delay-time for
 404C46C4 (at 404C4728) now 5
 Feb 19 17:46:14 ip135 1968: *Feb 19 17:43:55: RADIUS: Received from id 173
 195.5.22.130:1646, Accounting-response, len 20
 Feb 19 17:46:14 ip135 1969: *Feb 19 17:43:55: RADIUS: Response (173) failed
 decrypt
 Feb 19 17:46:19 ip135 1970: *Feb 19 17:43:59: RADIUS: Retransmit id 173
 Feb 19 17:46:19 ip135 1971: *Feb 19 17:43:59: RADIUS: acct-delay-time for
 404C46C4 (at 404C4728) now 10
 Feb 19 17:46:19 ip135 1972: *Feb 19 17:44:00: RADIUS: Received from id 174
 195.5.22.130:1646, Accounting-response, len 20
 Feb 19 17:46:19 ip135 1973: *Feb 19 17:44:00: RADIUS: Response (174) failed
 decrypt
 Feb 19 17:46:24 ip135 1974: *Feb 19 17:44:04: RADIUS: Retransmit id 174
 Feb 19 17:46:24 ip135 1975: *Feb 19 17:44:04: RADIUS: acct-delay-time for
 404C46C4 (at 404C4728) now 15
 Feb 19 17:46:24 ip135 1976: *Feb 19 17:44:05: RADIUS: Received from id 175
 195.5.22.130:1646, Accounting-response, len 20
 Feb 19 17:46:24 ip135 1977: *Feb 19 17:44:05: RADIUS: Response (175) failed
 decrypt
 Feb 19 17:46:29 ip135 1978: *Feb 19 17:44:09: RADIUS: Marking server
 195.5.22.130:1645,1646 dead
 Feb 19 17:46:29 ip135 1979: *Feb 19 17:44:09: RADIUS: Tried all servers.
 Feb 19 17:46:29 ip135 1980: *Feb 19 17:44:09: RADIUS: No valid server found.
 Trying any viable server
 Feb 19 17:46:29 ip135 1981: *Feb 19 17:44:09: RADIUS: Tried all servers.
 Feb 19 17:46:29 ip135 1982: *Feb 19 17:44:09: RADIUS: No response for id 175
 
 Ключи сверяли, меняли, не помогает. Другой радиус-сервер пробовали( был
 RADACCT,
 пробовали XTRadius ). То же самое.
 
 Кусок конфига:
 service timestamps debug datetime localtime
 service timestamps log datetime localtime
 service password-encryption
 !
 hostname router1
 !
 no logging console
 logging monitor warnings
 aaa new-model
 aaa authentication login execcheck group tacacs+
 aaa authentication login amigo local
 aaa authentication ppp ppp_list group tacacs+
 aaa authorization exec default group tacacs+ local
 aaa authorization network default group tacacs+
 aaa accounting suppress null-username
 aaa accounting update periodic 1
 aaa accounting exec default start-stop group radius
 aaa accounting commands 0 default start-stop group radius
 aaa accounting network default start-stop group radius
 aaa accounting connection default start-stop group radius
 aaa accounting system default stop-only group tacacs+
 
 Иос: 12.1 13Т
 
 Может, кто сталкивался, мы уже не знаем, куда смотреть !
 --- ifmail v.2.15dev5
  * Origin: Demos online service (2:5020/400)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор