лог mpd5:
Код: Выделить всё
process 60911 started, version 5.4 (root@billing 12:51 21-янв-2010)
CONSOLE: listening on 127.0.0.1 5005
PPPoE: waiting for connection on sk0:, service "*"
[L] Incoming PPPoE connection request via sk0: for service "" from 00:21:9b:d3:33:ef
[L-1] Accepting PPPoE connection
[L-1] Link: OPEN event
[L-1] LCP: Open event
[L-1] LCP: state change Initial --> Starting
[L-1] LCP: LayerStart
[L-1] PPPoE: connection successful
[L-1] Link: UP event
[L-1] LCP: Up event
[L-1] LCP: state change Starting --> Req-Sent
[L-1] LCP: SendConfigReq #1
[L-1] MRU 1492
[L-1] MAGICNUM 6022aa95
[L-1] AUTHPROTO CHAP MD5
[L-1] LCP: rec'd Configure Request #0 (Req-Sent)
[L-1] MRU 1466
[L-1] MAGICNUM 29a1586e
[L-1] CALLBACK 6
[L-1] LCP: SendConfigRej #0
[L-1] CALLBACK 6
[L-1] LCP: rec'd Configure Ack #1 (Req-Sent)
[L-1] MRU 1492
[L-1] MAGICNUM 6022aa95
[L-1] AUTHPROTO CHAP MD5
[L-1] LCP: state change Req-Sent --> Ack-Rcvd
[L-1] LCP: rec'd Configure Request #1 (Ack-Rcvd)
[L-1] MRU 1466
[L-1] MAGICNUM 29a1586e
[L-1] LCP: SendConfigAck #1
[L-1] MRU 1466
[L-1] MAGICNUM 29a1586e
[L-1] LCP: state change Ack-Rcvd --> Opened
[L-1] LCP: auth: peer wants nothing, I want CHAP
[L-1] CHAP: sending CHALLENGE #1 len: 40
[L-1] LCP: LayerUp
[L-1] LCP: rec'd Ident #2 (Opened)
[L-1] MESG: MSRASV5.10
[L-1] LCP: rec'd Ident #3 (Opened)
[L-1] MESG: MSRAS-0-ADMIN_NOUT
[L-1] CHAP: rec'd RESPONSE #1 len: 25
[L-1] Name: "test"
[L-1] AUTH: Trying RADIUS
[L-1] AUTH: RADIUS returned: authenticated
[L-1] CHAP: Auth return status: authenticated
[L-1] CHAP: Reply message: Welcome
[L-1] CHAP: sending SUCCESS #1 len: 11
[L-1] LCP: authorization successful
[L-1] Link: Matched action 'bundle "B" ""'
[L-1] Creating new bundle using template "B".
[B-1] Bundle: Interface ng0 created
[L-1] Link: Join bundle "B-1"
[B-1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
[B-1] IPCP: Open event
[B-1] IPCP: state change Initial --> Starting
[B-1] IPCP: LayerStart
[B-1] IPCP: Up event
[B-1] IPCP: state change Starting --> Req-Sent
[B-1] IPCP: SendConfigReq #1
[B-1] IPADDR 192.168.255.254
[L-1] rec'd unexpected protocol CCP, rejecting
[B-1] IPCP: rec'd Configure Request #5 (Req-Sent)
[B-1] IPADDR 0.0.0.0
[B-1] NAKing with 192.168.253.17
[B-1] PRIDNS 0.0.0.0
[B-1] NAKing with 192.168.255.254
[B-1] PRINBNS 0.0.0.0
[B-1] SECDNS 0.0.0.0
[B-1] SECNBNS 0.0.0.0
[B-1] IPCP: SendConfigRej #5
[B-1] PRINBNS 0.0.0.0
[B-1] SECDNS 0.0.0.0
[B-1] SECNBNS 0.0.0.0
[B-1] IPCP: rec'd Configure Ack #1 (Req-Sent)
[B-1] IPADDR 192.168.255.254
[B-1] IPCP: state change Req-Sent --> Ack-Rcvd
[B-1] IPCP: rec'd Configure Request #6 (Ack-Rcvd)
[B-1] IPADDR 0.0.0.0
[B-1] NAKing with 192.168.253.17
[B-1] PRIDNS 0.0.0.0
[B-1] NAKing with 192.168.255.254
[B-1] IPCP: SendConfigNak #6
[B-1] IPADDR 192.168.253.17
[B-1] PRIDNS 192.168.255.254
[B-1] IPCP: rec'd Configure Request #7 (Ack-Rcvd)
[B-1] IPADDR 192.168.253.17
[B-1] 192.168.253.17 is OK
[B-1] PRIDNS 192.168.255.254
[B-1] IPCP: SendConfigAck #7
[B-1] IPADDR 192.168.253.17
[B-1] PRIDNS 192.168.255.254
[B-1] IPCP: state change Ack-Rcvd --> Opened
[B-1] IPCP: LayerUp
[B-1] 192.168.255.254 -> 192.168.253.17
[B-1] IFACE: Up event
[L-1] ACCT: Close link due to accounting start error
[L-1] ACCT: Link close requested by the accounting
[L-1] Link: CLOSE event
[L-1] LCP: Close event
[L-1] LCP: state change Opened --> Closing
[L-1] Link: Leave bundle "B-1"
[B-1] Bundle: Status update: up 0 links, total bandwidth 9600 bps
[B-1] IPCP: Close event
[B-1] IPCP: state change Opened --> Closing
[B-1] IPCP: SendTerminateReq #2
[B-1] IPCP: LayerDown
[B-1] IFACE: Down event
[B-1] IPCP: Down event
[B-1] IPCP: LayerFinish
[B-1] Bundle: No NCPs left. Closing links...
[B-1] IPCP: state change Closing --> Initial
[B-1] Bundle: Shutdown
[L-1] LCP: SendTerminateReq #2
[L-1] LCP: LayerDown
[L-1] LCP: rec'd Terminate Ack #2 (Closing)
[L-1] LCP: state change Closing --> Closed
[L-1] LCP: LayerFinish
[L-1] Link: DOWN event
[L-1] LCP: Down event
[L-1] LCP: state change Closed --> Initial
Код: Выделить всё
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1 port 63628, id=125, length=192
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
User-Name = "test"
CHAP-Challenge = 0xbb1e68ea052506bd686a3c34eac6911e8bb73459fb8ec5d1e16c989abc860637d0d921
CHAP-Password = 0x01b447bcce732a8929b45da179ce1501e6
+- entering group authorize {...}
++[preprocess] returns ok
Exec-Program output: Auth-Type := Accept
Exec-Program-Wait: value-pairs: Auth-Type := Accept
Exec-Program: returned: 0
++[abills_preauth] returns ok
++[mschap] returns noop
[files] users: Matched entry DEFAULT at line 1
++[files] returns ok
Exec-Program output: Session-Timeout = 288753, Framed-IP-Address = 192.168.253.17, Framed-IP-Netmask = 255.255.255.255,
Exec-Program-Wait: value-pairs: Session-Timeout = 288753, Framed-IP-Address = 192.168.253.17, Framed-IP-Netmask = 255.255.255.255,
Exec-Program: returned: 0
++[abills_auth] returns ok
Found Auth-Type = Accept
Auth-Type = Accept, accepting the user
Sending Access-Accept of id 125 to 127.0.0.1 port 63628
Session-Timeout = 288753
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 56530, id=147, length=213
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
Acct-Status-Type = Start
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
User-Name = "test"
Acct-Multi-Session-Id = "7102047-B-1"
mpd-bundle = "B-1"
mpd-iface = "ng0"
mpd-iface-index = 5
Acct-Link-Count = 1
Acct-Authentic = RADIUS
+- entering group preacct {...}
++[preprocess] returns ok
Exec-Program output:
Exec-Program: returned: 0
++[abills_acc] returns ok
Finished request 1.
Cleaning up request 1 ID 147 with timestamp +31
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 125 with timestamp +31
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 56530, id=147, length=213
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
Acct-Status-Type = Start
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
User-Name = "test"
Acct-Multi-Session-Id = "7102047-B-1"
mpd-bundle = "B-1"
mpd-iface = "ng0"
mpd-iface-index = 5
Acct-Link-Count = 1
Acct-Authentic = RADIUS
+- entering group preacct {...}
++[preprocess] returns ok
Exec-Program output:
Exec-Program: returned: 0
++[abills_acc] returns ok
Finished request 2.
Cleaning up request 2 ID 147 with timestamp +41
Going to the next request
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 56530, id=147, length=213
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
Acct-Status-Type = Start
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
User-Name = "test"
Acct-Multi-Session-Id = "7102047-B-1"
mpd-bundle = "B-1"
mpd-iface = "ng0"
mpd-iface-index = 5
Acct-Link-Count = 1
Acct-Authentic = RADIUS
+- entering group preacct {...}
++[preprocess] returns ok
Exec-Program output:
Exec-Program: returned: 0
++[abills_acc] returns ok
Finished request 3.
Cleaning up request 3 ID 147 with timestamp +51
Going to the next request
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 50731, id=191, length=261
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
User-Name = "test"
Acct-Multi-Session-Id = "7102047-B-1"
mpd-bundle = "B-1"
mpd-iface = "ng0"
mpd-iface-index = 5
Acct-Link-Count = 1
Acct-Authentic = RADIUS
Acct-Status-Type = Stop
Acct-Terminate-Cause = Admin-Reset
Acct-Session-Time = 30
Acct-Input-Octets = 1715
Acct-Input-Packets = 16
Acct-Input-Gigawords = 0
Acct-Output-Octets = 340
Acct-Output-Packets = 9
Acct-Output-Gigawords = 0
+- entering group preacct {...}
++[preprocess] returns ok
Exec-Program output:
Exec-Program: returned: 0
++[abills_acc] returns ok
Finished request 4.
Cleaning up request 4 ID 191 with timestamp +61
Going to the next request
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 50731, id=191, length=261
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
User-Name = "test"
Acct-Multi-Session-Id = "7102047-B-1"
mpd-bundle = "B-1"
mpd-iface = "ng0"
mpd-iface-index = 5
Acct-Link-Count = 1
Acct-Authentic = RADIUS
Acct-Status-Type = Stop
Acct-Terminate-Cause = Admin-Reset
Acct-Session-Time = 30
Acct-Input-Octets = 1715
Acct-Input-Packets = 16
Acct-Input-Gigawords = 0
Acct-Output-Octets = 340
Acct-Output-Packets = 9
Acct-Output-Gigawords = 0
+- entering group preacct {...}
++[preprocess] returns ok
Exec-Program output:
Exec-Program: returned: 0
++[abills_acc] returns ok
Finished request 5.
Cleaning up request 5 ID 191 with timestamp +71
Going to the next request
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 50731, id=191, length=261
NAS-Identifier = "billing"
Acct-Session-Id = "7102047-L-1"
NAS-Port = 1
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "00219bd333ef"
NAS-Port-Id = "sk0"
mpd-link = "L-1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Client-Endpoint:0 = "00:21:9b:d3:33:ef"
Framed-IP-Address = 192.168.253.17
Framed-IP-Netmask = 255.255.255.255
User-Name = "test"
Acct-Multi-Session-Id = "7102047-B-1"
mpd-bundle = "B-1"
mpd-iface = "ng0"
mpd-iface-index = 5
Acct-Link-Count = 1
Acct-Authentic = RADIUS
Acct-Status-Type = Stop
Acct-Terminate-Cause = Admin-Reset
Acct-Session-Time = 30
Acct-Input-Octets = 1715
Acct-Input-Packets = 16
Acct-Input-Gigawords = 0
Acct-Output-Octets = 340
Acct-Output-Packets = 9
Acct-Output-Gigawords = 0
+- entering group preacct {...}
++[preprocess] returns ok
Exec-Program output:
Exec-Program: returned: 0
++[abills_acc] returns ok
Finished request 6.
Cleaning up request 6 ID 191 with timestamp +81
Going to the next request
Ready to process requests.
Код: Выделить всё
startup:
set console self 127.0.0.1 5005
set user admin PASSWD admin
set console open
log -echo -radius -rep
default:
load pppoe_server
pppoe_server:
create bundle template B
set iface enable tcpmssfix
set iface up-script "/usr/abills/libexec/linkupdown mpd up"
set iface down-script "/usr/abills/libexec/linkupdown mpd down"
set ipcp no vjcomp
set ipcp dns 192.168.255.254
set ipcp ranges 192.168.255.254/32 192.168.252.0/22
create link template L pppoe
set link action bundle B
set pppoe service "*"
set pppoe iface sk0
set link enable incoming
load server_common
server_common:
set link no pap eap chap
set link yes chap-md5
set link keep-alive 20 60
set link enable incoming
set link no acfcomp protocomp
load radius
radius:
set radius server 127.0.0.1 PASSWD 1812 1813
set radius retries 3
set radius timeout 10
set auth acct-update 300
set auth enable radius-auth
set auth enable radius-acct
set auth disable internal