Итак приступим. Ось FreeBSD 6.2 - порты обновлены и находятся в актуальном состоянии.
Общая информация о железе
Код: Выделить всё
# sysctl hw
hw.machine: i386
hw.model: Intel(R) Xeon(TM) CPU 2.80GHz
hw.ncpu: 4
hw.byteorder: 1234
hw.physmem: 2137673728
hw.usermem: 2095529984
hw.pagesize: 4096
hw.floatingpoint: 1
hw.machine_arch: i386
hw.realmem: 2146631680
hw.aac.iosize_max: 65536
hw.amr.force_sg32: 0
hw.an.an_dump: off
hw.an.an_cache_mode: dbm
hw.an.an_cache_mcastonly: 0
hw.an.an_cache_iponly: 1
hw.ata.ata_dma: 1
hw.ata.atapi_dma: 1
hw.ata.wc: 1
hw.ath.hal.version: 0.9.17.2
hw.ath.hal.dma_brt: 2
hw.ath.hal.sw_brt: 10
hw.ath.hal.swba_backoff: 0
hw.ath.dwell: 200
hw.ath.calibrate: 30
hw.ath.outdoor: 1
hw.ath.xchanmode: 1
hw.ath.countrycode: 0
hw.ath.regdomain: 0
hw.ath.rxbuf: 40
hw.ath.txbuf: 100
hw.cardbus.debug: 0
hw.cardbus.cis_debug: 0
hw.cs.debug: 0
hw.cs.ignore_checksum_failure: 0
hw.cs.recv_delay: 570
hw.firewire.try_bmr: 1
hw.firewire.hold_count: 3
hw.firewire.fwmem.eui64_hi: 0
hw.firewire.fwmem.eui64_lo: 0
hw.firewire.fwmem.speed: 2
hw.firewire.fwe.stream_ch: 1
hw.firewire.fwe.tx_speed: 2
hw.firewire.fwe.rx_queue_len: 128
hw.firewire.sbp.auto_login: 1
hw.firewire.sbp.max_speed: -1
hw.firewire.sbp.exclusive_login: 1
hw.firewire.sbp.login_delay: 1000
hw.firewire.sbp.scan_delay: 500
hw.firewire.sbp.use_doorbell: 0
hw.firewire.sbp.tags: 0
hw.mfi.event_locale: 65535
hw.mfi.event_class: -2
hw.pccard.debug: 0
hw.pccard.cis_debug: 0
hw.cbb.start_memory: 2281701376
hw.cbb.start_16_io: 256
hw.cbb.start_32_io: 4096
hw.cbb.debug: 0
hw.pcic.intr_mask: 57016
hw.pci.enable_io_modes: 1
hw.pci.do_power_nodriver: 0
hw.pci.do_power_resume: 1
hw.pci.host_mem_start: 2147483648
hw.pci.irq_override_mask: 57080
hw.wi.txerate: 0
hw.wi.debug: 0
hw.xe.debug: 0
hw.intr_storm_threshold: 500
hw.availpages: 521893
hw.bus.devctl_disable: 0
hw.dc_quick: 1
hw.ste.rxsyncs: 0
hw.psm.tap_threshold: 25
hw.psm.tap_timeout: 125000
hw.kbd.keymap_restrict_change: 0
hw.nve_pollinterval: 0
hw.syscons.saver.keybonly: 1
hw.syscons.bell: 1
hw.syscons.kbd_reboot: 1
hw.syscons.kbd_debug: 1
hw.syscons.sc_no_suspend_vtswitch: 0
hw.busdma.total_bpages: 65
hw.busdma.zone0.total_bpages: 1
hw.busdma.zone0.free_bpages: 1
hw.busdma.zone0.reserved_bpages: 0
hw.busdma.zone0.active_bpages: 0
hw.busdma.zone0.total_bounced: 0
hw.busdma.zone0.total_deferred: 0
hw.busdma.zone0.lowaddr: 0xffffffff
hw.busdma.zone0.alignment: 4096
hw.busdma.zone0.boundary: 0
hw.busdma.zone1.total_bpages: 64
hw.busdma.zone1.free_bpages: 64
hw.busdma.zone1.reserved_bpages: 0
hw.busdma.zone1.active_bpages: 0
hw.busdma.zone1.total_bounced: 0
hw.busdma.zone1.total_deferred: 0
hw.busdma.zone1.lowaddr: 0xffffffff
hw.busdma.zone1.alignment: 2
hw.busdma.zone1.boundary: 65536
hw.clockrate: 2800
hw.instruction_sse: 1
hw.via_feature_rng: 0
hw.via_feature_xcrypt: 0
hw.apic.enable_extint: 0
hw.acpi.supported_sleep_state: S1 S4 S5
hw.acpi.power_button_state: S5
hw.acpi.sleep_button_state: S1
hw.acpi.lid_switch_state: NONE
hw.acpi.standby_state: S1
hw.acpi.suspend_state: S3
hw.acpi.sleep_delay: 1
hw.acpi.s4bios: 0
hw.acpi.verbose: 0
hw.acpi.disable_on_reboot: 0
hw.acpi.handle_reboot: 0
hw.acpi.reset_video: 0
hw.acpi.cpu.cx_supported: C1/0
hw.acpi.cpu.cx_lowest: C1
hw.acpi.cpu.cx_usage: 100.00%
Код: Выделить всё
#
# SMP -- Generic kernel configuration file for FreeBSD/i386 SMP
# Use this for multi-processor machines
#
# $FreeBSD: src/sys/i386/conf/SMP,v 1.5.6.1 2005/09/18 03:37:58 scottl Exp $
include GENERIC
ident SMP-GENERIC
# To make an SMP kernel, the next line is needed
options SMP # Symmetric MultiProcessor Kernel
options IPFIREWALL
options DUMMYNET
options NETGRAPH
options NETGRAPH_PPPOE
options IPFILTER
options IPFILTER_LOG
options IPDIVERT
Установил RADIUS
Код: Выделить всё
# radiusd -v
radiusd: FreeRADIUS Version 1.1.7, for host i386-portbld-freebsd6.2, built on Sep 14 2007 at 07:37:48
Copyright (C) 2000-2007 The FreeRADIUS server project.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
For more information about these matters, see the file named COPYRIGHT.
Код: Выделить всё
bge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=1b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING>
inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
ether 00:18:f3:f9:40:db
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
bge1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=1b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING>
inet 192.168.51.254 netmask 0xffffff00 broadcast 192.168.51.255
ether 00:18:f3:f9:40:7c
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
Добавил в /usr/local/etc/raddb/users
Код: Выделить всё
DEFAULT Auth-Type = Accept
Exec-Program-Wait = "/usr/abills/libexec/rauth.pl"
Код: Выделить всё
DEFAULT Acct-Status-Type == Start
Exec-Program = "/usr/abills/libexec/racct.pl"
DEFAULT Acct-Status-Type == Alive
Exec-Program = "/usr/abills/libexec/racct.pl"
DEFAULT Acct-Status-Type == Stop
Exec-Program = "/usr/abills/libexec/racct.pl"
Код: Выделить всё
client 192.168.51.0/24 {
secret = radsecret
shortname = sfmei
}
client 127.0.0.1 {
secret = radsecret
shortname = localhost
}
Только у меня вместо 127.0.0.1 используется ip адрес адаптера bge1 192.168.51.254 он является внутренним для местной локальной сетиПереходим в каталог с программами
cd abills/soft
tar zxvf exppp_asm-0.2.4.tar.gz
cd exppp_asm-0.2.4
make
cp ppp /usr/sbin/
cp raddb/exppp /usr/local/radiusd/etc/raddb/Дописываем дополнительный словарь для exppp
/usr/local/radiusd/etc/raddb/dictionary
$INCLUDE /usr/local/radiusd/etc/raddb/expppРазделитель после $INCLUDE табуляция
перезагружаем радиус
Конфигурационный файл для подключения к радиусу
/etc/radius.conf
auth 127.0.0.1:1812 radsecret 4 4
acct 127.0.0.1:1813 radsecret 4 4
Мой /etc/ppp/ppp.conf
Код: Выделить всё
default:
set log Phase tun command Warning
INTERNET:
set device PPPoE:bge0
set authname asdasdaads
set authkey asdasdasd
enable dns
add default HISADDR
pppoe-in:
set mtu 1492
set mru 1492
allow mode direct
enable lqr
set lqrperiod 5
set timeout 6000
set ifaddr 10.0.0.1 10.0.0.2-254 255.255.255.255
disable acfcomp protocomp
deny acfcomp
set speed sync
disable ipv6
enable chap
accept dns
set server +3000 password
set rad_service_type 11
set radius /etc/radius.conf
set rad_alive 1
Создаю тариф с ограничениме по траффику 10 мегабайт - ну для примера в сумме входящего и исходящего(Система Dial-UP/VPN - Тарифные планы). Создаю пользователя test с паролем 123 (клиенты логины добавить). Выставляю ему единственный тарифный план - создлаю стандартное PPPoE подключение в Windows XP SP2 (Пуск - Настройка Сетевые подключения - Мастер новых подключений ну и т.д.) Все настройки п оумолчанию. Жму подключится и смотрю что выдает radius -x и в логах /etc/ppp/ppp.log
радиус выдает что то типа того...
Код: Выделить всё
# radiusd -x
Starting - reading configuration files ...
Using deprecated naslist file. Support for this will go away soon.
Module: Loaded exec
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
Module: Instantiated mschap (mschap)
Module: Loaded System
Module: Instantiated unix (unix)
Module: Loaded eap
rlm_eap: Loaded and initialized type md5
rlm_eap: Loaded and initialized type leap
rlm_eap: Loaded and initialized type gtc
rlm_eap: Loaded and initialized type mschapv2
Module: Instantiated eap (eap)
Module: Loaded preprocess
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
Module: Instantiated realm (suffix)
Module: Loaded files
Module: Instantiated files (files)
Module: Loaded Acct-Unique-Session-Id
Module: Instantiated acct_unique (acct_unique)
Module: Loaded detail
Module: Instantiated detail (detail)
Module: Loaded radutmp
Module: Instantiated radutmp (radutmp)
Initializing the thread pool...
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.
...
rad_recv: Accounting-Request packet from host 192.168.51.254:55098, id=120, length=237
Calling-Station-Id = "0:15:c5:6b:4e:90"
Called-Station-Id = "pppoe"
Service-Type = VPN
User-Name = "test"
Framed-Protocol = PPP
Framed-IP-Address = 10.0.0.9
Framed-IP-Netmask = 255.255.255.255
NAS-Identifier = "SFMEI_GATE."
NAS-Port = 0
Acct-Status-Type = Interim-Update
Acct-Session-Id = "s--1128734266"
Acct-Multi-Session-Id = ""
Acct-Delay-Time = 0
Acct-Input-Octets = 0
Acct-Input-Packets = 0
Acct-Output-Octets = 1219
Acct-Output-Packets = 7
Acct-Session-Time = 29
Exppp-Acct-LocalInput-Octets = 0
Exppp-Acct-LocalOutput-Octets = 0
Exppp-Acct-IteriumIn-Octets = 0
Exppp-Acct-IteriumOut-Octets = 0
Exppp-Acct-LocalIteriumIn-Octets = 0
Exppp-Acct-LocalIteriumOut-Octets = 0
Exppp-Acct-IteriumTime = 1
Sending Accounting-Response of id 120 to 192.168.51.254 port 55098
Код: Выделить всё
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: Phase: Using interface: tun0
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: Phase: deflink: Created in closed state
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set mtu 1492
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set mru 1492
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: enable lqr
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set lqrperiod 5
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set timeout 6000
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set ifaddr 10.0.0.1 10.0.0.2-254 255.255.255.255
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: disable acfcomp protocomp
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: deny acfcomp
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set speed sync
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: disable ipv6
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Warning: disable ipv6: Invalid command
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Warning: disable ipv6: Failed 1
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: enable chap
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: accept dns
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set server +3000 ********
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Listening at port 3000.
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set rad_service_type 11
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set radius /etc/radius.conf
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: pppoe-in: set rad_alive 1
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: PPP Started (direct mode).
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: bundle: Establish
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: closed -> opening
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: Link is a netgraph node
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: Connected!
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: opening -> carrier
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: carrier -> lcp
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: bundle: Authenticate
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: his = none, mine = CHAP 0x05
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Chap Output: CHALLENGE
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Chap Input: RESPONSE (16 bytes from test)
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Radius: Request sent
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Radius(auth): ACCEPT received
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Session-Timeout 1296202
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Octets limit 659929669
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: IP 10.0.0.9
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Netmask 255.255.255.255
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: Chap Output: SUCCESS
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Warning: OpenSecret: Can't open /etc/ppp/ppp.secret.
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: deflink: lcp -> open
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Phase: bundle: Network
Oct 17 00:56:38 SFMEI_GATE ppp[1990]: tun0: Command: MYADDR: !bg /usr/abills/libexec/linkupdown up INTERFACE USER HISADDR
Oct 17 00:57:48 SFMEI_GATE ppp[1990]: tun0: Phase: Radius: Request re-sent
выдается табличка с примерно следующим содержанием
Код: Выделить всё
Информация
Отключен
Сервер доступа ID 5
Сервер доступа IP 192.168.51.254
Порт 0
SESSION_ID s--1128734266
0
Помогите пожалуйсста. Не знаю что даж и делать. Ну соотвественно если выработать лимит трафика, то потом все нормально RADIUS не пускат
Код: Выделить всё
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: Phase: Using interface: tun0
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: Phase: deflink: Created in closed state
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set mtu 1492
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set mru 1492
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: enable lqr
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set lqrperiod 5
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set timeout 6000
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set ifaddr 10.0.0.1 10.0.0.2-254 255.255.255.255
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: disable acfcomp protocomp
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: deny acfcomp
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set speed sync
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: disable ipv6
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Warning: disable ipv6: Invalid command
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Warning: disable ipv6: Failed 1
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: enable chap
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: accept dns
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set server +3000 ********
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: Listening at port 3000.
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set rad_service_type 11
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set radius /etc/radius.conf
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Command: pppoe-in: set rad_alive 1
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: PPP Started (direct mode).
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: bundle: Establish
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: closed -> opening
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: Link is a netgraph node
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: Connected!
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: opening -> carrier
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: carrier -> lcp
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: bundle: Authenticate
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: his = none, mine = CHAP 0x05
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: Chap Output: CHALLENGE
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: Chap Input: RESPONSE (16 bytes from test)
Oct 17 01:02:26 SFMEI_GATE ppp[2147]: tun0: Phase: Radius: Request sent
Oct 17 01:02:28 SFMEI_GATE ppp[2147]: tun0: Phase: Chap Input: RESPONSE (16 bytes from test)
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: Chap Input: RESPONSE (16 bytes from test)
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: Radius: Request re-sent
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: Radius(auth): REJECT received
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: Reply-Message "Rejected! MONTH Traffic limit utilized '-0.64202404 Mb'"
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: Chap Output: FAILURE
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: Disconnected!
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: Connect time: 4 secs: 252 octets in, 158 octets out, Local: 0 0
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: 13 packets in, 10 packets out
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: total 102 bytes/sec, peak 164 bytes/sec on Wed Oct 17 01:02:27 2007
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: deflink: lcp -> closed
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: bundle: Dead
Oct 17 01:02:30 SFMEI_GATE ppp[2147]: tun0: Phase: PPP Terminated (normal).
