Не передаются атрибуты шейпера accel-ppp

[fet4]

Здравствуйте!
Помогите с проблемкой. Заметил что перестали передаваться атрибуты шейпера для accel-ppp.

Конфиг accel

Код: Выделить всё

[modules]
log_file
pppoe
auth_mschap_v2
radius
sigchld
pppd_compat
shaper

[core]
log-error=/var/log/accel-ppp/core.log
thread-count=4

[ppp]
verbose=1
min-mtu=1400
mtu=1492
mru=1492
ipv4=require
ipv6=deny
lcp-echo-interval=20
lcp-echo-timeout=120

[pppoe]
verbose=1

interface=eth0
interface=vlan100
interface=vlan101
interface=vlan102
interface=vlan103
interface=vlan104
interface=vlan105
interface=vlan106
interface=vlan107
interface=vlan108
interface=vlan109
interface=vlan110
interface=vlan111
interface=vlan112
interface=vlan113
interface=vlan114
interface=vlan115
interface=vlan116
interface=vlan117
interface=vlan118
interface=vlan119
interface=vlan120

[dns]
dns1=172.30.0.1
dns2=172.30.1.1

[radius]
dictionary=/usr/local/share/accel-ppp/radius/dictionary
nas-identifier=accel-ppp
nas-ip-address=127.0.0.1
gw-ip-address=172.31.1.254
auth-server=127.0.0.1:1812,TDKIezOvdhHQmonC
acct-server=127.0.0.1:1813,TDKIezOvdhHQmonC
server=127.0.0.1,TDKIezOvdhHQmonC,auth-port=1812,acct-port=1813,req-limit=0,fail-time=0
dae-server=127.0.0.1:3799,TDKIezOvdhHQmonC
verbose=1

[log]
log-file=/var/log/accel-ppp/accel-ppp.log
log-emerg=/var/log/accel-ppp/emerg.log
log-fail-file=/var/log/accel-ppp/auth-fail.log
copy=1
level=3

[pppd-compat]
#ip-pre-up=/etc/ppp/ip-pre-up
ip-up=/etc/ppp/ip-up
ip-down=/etc/ppp/ip-down
ip-change=/etc/ppp/ip-change
radattr-prefix=/var/run/radattr
verbose=1

[shaper]
up-limiter=police
down-limiter=tbf
attr-down=PPPD-Downstream-Speed-Limit
attr-up=PPPD-Upstream-Speed-Limit
verbose=1

[cli]
telnet=127.0.0.1:2000
tcp=127.0.0.1:2001
#password=123

Не могу понять в чем бок. Работало и перестало.

[~AsmodeuS~]

радиус пары покажите

[fet4]

Я извиняюсь, где их глянуть?

[dimka88]

На NAS в /usr/local/share/accel-ppp/radius/dictionary
На биллинге примерно в /etc/raddb/dictionary

В вики загляните http://abills.net.ua/wiki/doku.php/abil ... el_pptp:ru

Код: Выделить всё

ATTRIBUTE PPPD-Upstream-Speed-Limit 230 integer
ATTRIBUTE PPPD-Downstream-Speed-Limit 231 integer

[~AsmodeuS~]

radiusd -X

[fet4]

Да заглядывал все четко по вики.

Код: Выделить всё

root ~ # cat /usr/local/share/accel-ppp/radius/dictionary

$INCLUDE dictionary.rfc2865
$INCLUDE dictionary.rfc2866
$INCLUDE dictionary.rfc2867
$INCLUDE dictionary.rfc2868
$INCLUDE dictionary.rfc2869
$INCLUDE dictionary.rfc3162
$INCLUDE dictionary.rfc3576
$INCLUDE dictionary.rfc3580
$INCLUDE dictionary.rfc4072
$INCLUDE dictionary.rfc4372
$INCLUDE dictionary.rfc4679
$INCLUDE dictionary.rfc4818
$INCLUDE dictionary.rfc5176

$INCLUDE dictionary.microsoft
$INCLUDE dictionary.cisco
$INCLUDE dictionary.alcatel

ATTRIBUTE       Session-Octets-Limit    227     integer
ATTRIBUTE       Octets-Direction        228     integer

ATTRIBUTE       PPPD-Upstream-Speed-Limit       230     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit     231     integer
ATTRIBUTE       PPPD-Upstream-Speed-Limit-1     232     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit-1   233     integer
ATTRIBUTE       PPPD-Upstream-Speed-Limit-2     234     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit-2   235     integer
ATTRIBUTE       PPPD-Upstream-Speed-Limit-3     236     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit-3   237     integer

ATTRIBUTE       Acct-Interim-Interval   85      integer
ATTRIBUTE       Acct-Input-Gigawords    52      integer
ATTRIBUTE       Acct-Output-Gigawords   53      integer

Код: Выделить всё

root ~ # cat /etc/freeradius/dictionary

$INCLUDE        /usr/share/freeradius/dictionary

ATTRIBUTE       Session-Octets-Limit    227     integer
ATTRIBUTE       Octets-Direction        228     integer

ATTRIBUTE       PPPD-Upstream-Speed-Limit       230     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit     231     integer
ATTRIBUTE       PPPD-Upstream-Speed-Limit-1     232     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit-1   233     integer
ATTRIBUTE       PPPD-Upstream-Speed-Limit-2     234     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit-2   235     integer
ATTRIBUTE       PPPD-Upstream-Speed-Limit-3     236     integer
ATTRIBUTE       PPPD-Downstream-Speed-Limit-3   237     integer

ATTRIBUTE       Acct-Interim-Interval   85      integer
ATTRIBUTE       Acct-Input-Gigawords    52      integer
ATTRIBUTE       Acct-Output-Gigawords   53      integer

Код: Выделить всё

root ~ # freeradius -X
FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Dec 16 2012 at 13:28:43
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
including configuration file /etc/freeradius/radiusd.conf
including configuration file /etc/freeradius/clients.conf
including files in directory /etc/freeradius/modules/
including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login
including configuration file /etc/freeradius/modules/realm
including configuration file /etc/freeradius/modules/smsotp
including configuration file /etc/freeradius/modules/digest
including configuration file /etc/freeradius/modules/pam
including configuration file /etc/freeradius/modules/perl
including configuration file /etc/freeradius/modules/dynamic_clients
including configuration file /etc/freeradius/modules/etc_group
including configuration file /etc/freeradius/modules/replicate
including configuration file /etc/freeradius/modules/expr
including configuration file /etc/freeradius/modules/acct_unique
including configuration file /etc/freeradius/modules/echo
including configuration file /etc/freeradius/modules/krb5
including configuration file /etc/freeradius/modules/inner-eap
including configuration file /etc/freeradius/modules/pap
including configuration file /etc/freeradius/modules/passwd
including configuration file /etc/freeradius/modules/radutmp
including configuration file /etc/freeradius/modules/ippool
including configuration file /etc/freeradius/modules/unix
including configuration file /etc/freeradius/modules/expiration
including configuration file /etc/freeradius/modules/policy
including configuration file /etc/freeradius/modules/checkval
including configuration file /etc/freeradius/modules/preprocess
including configuration file /etc/freeradius/modules/mschap
including configuration file /etc/freeradius/modules/cui
including configuration file /etc/freeradius/modules/wimax
including configuration file /etc/freeradius/modules/mac2vlan
including configuration file /etc/freeradius/modules/attr_rewrite
including configuration file /etc/freeradius/modules/otp
including configuration file /etc/freeradius/modules/detail.example.com
including configuration file /etc/freeradius/modules/opendirectory
including configuration file /etc/freeradius/modules/redis
including configuration file /etc/freeradius/modules/sql_log
including configuration file /etc/freeradius/modules/exec
including configuration file /etc/freeradius/modules/attr_filter
including configuration file /etc/freeradius/modules/soh
including configuration file /etc/freeradius/modules/chap
including configuration file /etc/freeradius/modules/files
including configuration file /etc/freeradius/modules/detail
including configuration file /etc/freeradius/modules/smbpasswd
including configuration file /etc/freeradius/modules/ntlm_auth
including configuration file /etc/freeradius/modules/counter
including configuration file /etc/freeradius/modules/sradutmp
including configuration file /etc/freeradius/modules/linelog
including configuration file /etc/freeradius/modules/rediswho
including configuration file /etc/freeradius/modules/logintime
including configuration file /etc/freeradius/modules/detail.log
including configuration file /etc/freeradius/modules/mac2ip
including configuration file /etc/freeradius/modules/ldap
including configuration file /etc/freeradius/modules/always
including configuration file /etc/freeradius/policy.conf
including configuration file /etc/freeradius/sites-enabled/abills_default
main {
        user = "freerad"
        group = "freerad"
        allow_core_dumps = no
}
including dictionary file /etc/freeradius/dictionary
main {
        name = "freeradius"
        prefix = "/usr"
        localstatedir = "/var"
        sbindir = "/usr/sbin"
        logdir = "/var/log/freeradius"
        run_dir = "/var/run/freeradius"
        libdir = "/usr/lib/freeradius"
        radacctdir = "/var/log/freeradius/radacct"
        hostname_lookups = no
        max_request_time = 30
        cleanup_delay = 5
        max_requests = 512000
        pidfile = "/var/run/freeradius/freeradius.pid"
        checkrad = "/usr/sbin/checkrad"
        debug_level = 0
        proxy_requests = no
 log {
        stripped_names = no
        auth = no
        auth_badpass = no
        auth_goodpass = no
 }
 security {
        max_attributes = 200
        reject_delay = 1
        status_server = yes
 }
}
radiusd: #### Loading Realms and Home Servers ####
radiusd: #### Loading Clients ####
 client 127.0.0.1 {
        require_message_authenticator = no
        secret = "TDKIezOvdhHQmonC"
        shortname = "shortname"
 }
radiusd: #### Instantiating modules ####
 instantiate {
 Module: Linked to module rlm_exec
 Module: Instantiating module "exec" from file /etc/freeradius/modules/exec
  exec {
        wait = no
        input_pairs = "request"
        shell_escape = yes
  }
 Module: Linked to module rlm_expiration
 Module: Instantiating module "expiration" from file /etc/freeradius/modules/expiration
  expiration {
        reply-message = "Password Has Expired  "
  }
 Module: Linked to module rlm_logintime
 Module: Instantiating module "logintime" from file /etc/freeradius/modules/logintime
  logintime {
        reply-message = "You are calling outside your allowed timespan  "
        minimum-timeout = 60
  }
 }
radiusd: #### Loading Virtual Servers ####
server { # from file /etc/freeradius/radiusd.conf
 modules {
  Module: Creating Auth-Type = Perl
  Module: Creating Post-Auth-Type = REJECT
 Module: Checking authenticate {...} for more modules to load
 Module: Linked to module rlm_pap
 Module: Instantiating module "pap" from file /etc/freeradius/modules/pap
  pap {
        encryption_scheme = "auto"
        auto_header = no
  }
 Module: Linked to module rlm_mschap
 Module: Instantiating module "mschap" from file /etc/freeradius/modules/mschap
  mschap {
        use_mppe = yes
        require_encryption = no
        require_strong = no
        with_ntdomain_hack = no
        allow_retry = yes
  }
 Module: Linked to module rlm_perl
 Module: Instantiating module "perl" from file /etc/freeradius/modules/perl
  perl {
        module = "/usr/abills/libexec/rlm_perl.pl"
        func_authorize = "authorize"
        func_authenticate = "authenticate"
        func_accounting = "accounting"
        func_preacct = "preacct"
        func_checksimul = "checksimul"
        func_detach = "detach"
        func_xlat = "xlat"
        func_pre_proxy = "pre_proxy"
        func_post_proxy = "post_proxy"
        func_post_auth = "post_auth"
        func_recv_coa = "recv_coa"
        func_send_coa = "send_coa"
  }
 Module: Checking authorize {...} for more modules to load
 Module: Linked to module rlm_preprocess
 Module: Instantiating module "preprocess" from file /etc/freeradius/modules/preprocess
  preprocess {
        huntgroups = "/etc/freeradius/huntgroups"
        hints = "/etc/freeradius/hints"
        with_ascend_hack = no
        ascend_channels_per_line = 23
        with_ntdomain_hack = no
        with_specialix_jetstream_hack = no
        with_cisco_vsa_hack = no
        with_alvarion_vsa_hack = no
  }
 Module: Linked to module rlm_files
 Module: Instantiating module "files" from file /etc/freeradius/modules/files
  files {
        usersfile = "/etc/freeradius/users"
        acctusersfile = "/etc/freeradius/acct_users"
        preproxy_usersfile = "/etc/freeradius/preproxy_users"
        compat = "no"
  }
 Module: Checking preacct {...} for more modules to load
 Module: Checking accounting {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 } # modules
} # server
radiusd: #### Opening IP addresses and Ports ####
listen {
        type = "auth"
        ipaddr = *
        port = 0
}
listen {
        type = "acct"
        ipaddr = *
        port = 0
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 49199, id=157, length=186
        User-Name = "automag"
        NAS-Identifier = "accel-ppp"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 139
        NAS-Port-Type = Virtual
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "00:de:fa:19:c0:02"
        Called-Station-Id = "64:66:b3:03:b0:3e"
        Acct-Status-Type = Interim-Update
        Acct-Authentic = RADIUS
        Acct-Session-Id = "5c7bde34627c4edf"
        Acct-Session-Time = 46803
        Acct-Input-Octets = 55694587
        Acct-Output-Octets = 824225183
        Acct-Input-Packets = 436697
        Acct-Output-Packets = 694912
        Acct-Input-Gigawords = 0
        Acct-Output-Gigawords = 0
        Framed-IP-Address = 10.192.197.72
# Executing section preacct from file /etc/freeradius/sites-enabled/abills_default
+- entering group preacct {...}
++[preprocess] returns ok
# Executing section accounting from file /etc/freeradius/sites-enabled/abills_default
+- entering group accounting {...}
rlm_perl: Added pair Acct-Input-Octets = 55694587
rlm_perl: Added pair NAS-Port-Type = Virtual
rlm_perl: Added pair Acct-Session-Id = 5c7bde34627c4edf
rlm_perl: Added pair Acct-Output-Gigawords = 0
rlm_perl: Added pair Service-Type = Framed-User
rlm_perl: Added pair Called-Station-Id = 64:66:b3:03:b0:3e
rlm_perl: Added pair Acct-Authentic = RADIUS
rlm_perl: Added pair Acct-Status-Type = Interim-Update
rlm_perl: Added pair Acct-Output-Packets = 694912
rlm_perl: Added pair NAS-IP-Address = 127.0.0.1
rlm_perl: Added pair Acct-Output-Octets = 824225183
rlm_perl: Added pair Acct-Session-Time = 46803
rlm_perl: Added pair Calling-Station-Id = 00:de:fa:19:c0:02
rlm_perl: Added pair Framed-Protocol = PPP
rlm_perl: Added pair User-Name = automag
rlm_perl: Added pair NAS-Identifier = accel-ppp
rlm_perl: Added pair Acct-Input-Gigawords = 0
rlm_perl: Added pair Framed-IP-Address = 10.192.197.72
rlm_perl: Added pair Acct-Input-Packets = 436697
rlm_perl: Added pair NAS-Port = 139
++[perl] returns ok
Sending Accounting-Response of id 157 to 127.0.0.1 port 49199
Finished request 0.
Cleaning up request 0 ID 157 with timestamp +6
Going to the next request
Ready to process requests.

[dimka88]

Тут только лог аккаунтинга, а необходим еще и authentication.

[fet4]

Где его взять подскажи?

[dimka88]

Запустите radiusd -X после выполните подключение со стороны клиента.

[fet4]

Вот оно вроде

Код: Выделить всё

Going to the next request
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 35263, id=1, length=188
        User-Name = "alena"
        NAS-Identifier = "accel-ppp"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 13
        NAS-Port-Type = Virtual
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "08:9e:01:27:38:f2"
        Called-Station-Id = "64:66:b3:03:b0:3e"
        MS-CHAP-Challenge = 0x0ad47c94dd950ad5e8959fb372690603
        MS-CHAP2-Response = 0x0100f7420ccf7999f0742a35d3b874e9ba4800000000000000001e4341511b7ecfae55c65de374e76c64338b2929c39d1a24
# Executing section authorize from file /etc/freeradius/sites-enabled/abills_default
+- entering group authorize {...}
++[preprocess] returns ok
[mschap] Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
++[mschap] returns ok
[files] users: Matched entry DEFAULT at line 38
++[files] returns ok
rlm_perl: Added pair NAS-Port-Type = Virtual
rlm_perl: Added pair Service-Type = Framed-User
rlm_perl: Added pair Called-Station-Id = 64:66:b3:03:b0:3e
rlm_perl: Added pair Calling-Station-Id = 08:9e:01:27:38:f2
rlm_perl: Added pair MS-CHAP-Challenge = 0x0ad47c94dd950ad5e8959fb372690603
rlm_perl: Added pair Framed-Protocol = PPP
rlm_perl: Added pair User-Name = alena
rlm_perl: Added pair NAS-Identifier = accel-ppp
rlm_perl: Added pair MS-CHAP2-Response = 0x0100f7420ccf7999f0742a35d3b874e9ba4800000000000000001e4341511b7ecfae55c65de374e76c64338b2929c39d1a24
rlm_perl: Added pair NAS-IP-Address = 127.0.0.1
rlm_perl: Added pair NAS-Port = 13
rlm_perl: Added pair Acct-Interim-Interval = 300
rlm_perl: Added pair Framed-IP-Address = 10.192.8.145
rlm_perl: Added pair Framed-IP-Netmask = 255.255.255.255
rlm_perl: Added pair Cleartext-Password = c5zjNCdb
rlm_perl: Added pair Auth-Type = MSCHAP
++[perl] returns ok
Found Auth-Type = MSCHAP
# Executing group from file /etc/freeradius/sites-enabled/abills_default
+- entering group MS-CHAP {...}
[mschap] Creating challenge hash with username: alena
[mschap] Told to do MS-CHAPv2 for alena with NT-Password
[mschap] adding MS-CHAPv2 MPPE keys
++[mschap] returns ok
  WARNING: Empty post-auth section.  Using default return values.
# Executing section post-auth from file /etc/freeradius/sites-enabled/abills_default
Sending Access-Accept of id 1 to 127.0.0.1 port 35263
        Acct-Interim-Interval = 300
        Framed-IP-Address = 10.192.8.145
        Framed-IP-Netmask = 255.255.255.255
        MS-CHAP2-Success = 0x01533d31463342443333423342423838313333373934363039383830374335423730343644383836373446
        MS-MPPE-Recv-Key = 0x89a654aeff9c0df23d5a8e8ce25c569e
        MS-MPPE-Send-Key = 0x87e4e60408c562af9fdf18d0654da349
        MS-MPPE-Encryption-Policy = 0x00000001
        MS-MPPE-Encryption-Types = 0x00000006
Finished request 5.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 37057, id=1, length=184
        User-Name = "alena"
        NAS-Identifier = "accel-ppp"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 13
        NAS-Port-Type = Virtual
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "08:9e:01:27:38:f2"
        Called-Station-Id = "64:66:b3:03:b0:3e"
        Acct-Status-Type = Start
        Acct-Authentic = RADIUS
        Acct-Session-Id = "5c7bde34627c52ad"
        Acct-Session-Time = 0
        Acct-Input-Octets = 0
        Acct-Output-Octets = 0
        Acct-Input-Packets = 0
        Acct-Output-Packets = 0
        Acct-Input-Gigawords = 0
        Acct-Output-Gigawords = 0
        Framed-IP-Address = 10.192.8.145
# Executing section preacct from file /etc/freeradius/sites-enabled/abills_default
+- entering group preacct {...}
++[preprocess] returns ok
# Executing section accounting from file /etc/freeradius/sites-enabled/abills_default
+- entering group accounting {...}
rlm_perl: Added pair Acct-Input-Octets = 0
rlm_perl: Added pair NAS-Port-Type = Virtual
rlm_perl: Added pair Acct-Session-Id = 5c7bde34627c52ad
rlm_perl: Added pair Acct-Output-Gigawords = 0
rlm_perl: Added pair Service-Type = Framed-User
rlm_perl: Added pair Called-Station-Id = 64:66:b3:03:b0:3e
rlm_perl: Added pair Acct-Authentic = RADIUS
rlm_perl: Added pair Acct-Status-Type = Start
rlm_perl: Added pair Acct-Output-Packets = 0
rlm_perl: Added pair NAS-IP-Address = 127.0.0.1
rlm_perl: Added pair Acct-Output-Octets = 0
rlm_perl: Added pair Acct-Session-Time = 0
rlm_perl: Added pair Calling-Station-Id = 08:9e:01:27:38:f2
rlm_perl: Added pair Framed-Protocol = PPP
rlm_perl: Added pair User-Name = alena
rlm_perl: Added pair NAS-Identifier = accel-ppp
rlm_perl: Added pair Acct-Input-Gigawords = 0
rlm_perl: Added pair Framed-IP-Address = 10.192.8.145
rlm_perl: Added pair Acct-Input-Packets = 0
rlm_perl: Added pair NAS-Port = 13
++[perl] returns ok
Sending Accounting-Response of id 1 to 127.0.0.1 port 37057
Finished request 6.
Cleaning up request 6 ID 1 with timestamp +8

[dimka88]

Код: Выделить всё

Sending Access-Accept of id 1 to 127.0.0.1 port 35263
        Acct-Interim-Interval = 300
        Framed-IP-Address = 10.192.8.145
        Framed-IP-Netmask = 255.255.255.255
        MS-CHAP2-Success = 0x01533d31463342443333423342423838313333373934363039383830374335423730343644383836373446
        MS-MPPE-Recv-Key = 0x89a654aeff9c0df23d5a8e8ce25c569e
        MS-MPPE-Send-Key = 0x87e4e60408c562af9fdf18d0654da349
        MS-MPPE-Encryption-Policy = 0x00000001
        MS-MPPE-Encryption-Types = 0x00000006

Биллинг действительно не передаёт атрибуты скорости. Скорее всего не правильно настроены интервалы тарифа. Покажите скрины настройки интервалов тарифного плана.

[fet4]

Вот

[fet4]

В тарифном плане, вижу появилась графа Сервер доступа, ставлю галочку для тарифа, перегружаю радиус так же интервалы не передаются

[dimka88]

Вроде все верно. А пользователю действительно присвоен данный тарифный план? Ерунда какая то.

[fet4]

Логин alena да, в этом тарифном плане. Может обновится или где еще может быть затык? Я пару раз вроде обновлялся, после того как шейпер работал, сейчас вот только увидил

Асмодеус чем подскажите?