Re: freeradius and mysql accounting and use of called-station-id
Hello,
thanks for all answer. The accounting attribute, I will check
with debuging on cisco router, in order to locate the problem.
My authentication problem with called -station-id is another.
Authentication with one entry per user for called-station-id in radcheck-table
works fine. But the probleme is, that the user comes with different called-staton-id.
How can I check two or more called-station-id's per user? Or can I us wildcards?
regards
Dirk Tanneberger
- Original Message -
From: "Thomas Jalsovsky" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, April 12, 2002 8:25 AM
Subject: Re: freeradius and mysql accounting and use of called-station-id
>
> Hello,
>
> if you make debugging in radius server and in Cisco ('debug
> radius' :), you should find, that Cisco doesn't send this attribute in the
> auth. requests, therefore you cannot make auth. decision by this
> attribute. I don't know that it is possible to configure Cisco to send
> this attribute, I cannot make that.
> Another solution: you should write/rewrite TCL IVR script and you
> can send the info (e.g. called-station-id) via Cisco VSA attribute and
> your FreeRADIUS server will see this through VSAs. Take a look for
> h323-ivr-in and h323-ivr-out in the TCL IVR 2 documentation.
>
> Regards,
> Thomas
>
> On Thu, 11 Apr 2002, Dirk Tanneberger wrote:
>
> > sql.conf is o.k. and with sql tracing I see, that these values are blank.
> > I think the Cisco AS5300 send not these values.
> > But how can I configure AS5300 to send the parameters?
> > In details-file are the following entries:
> >
> > Thu Apr 11 15:54:34 2002
> > NAS-IP-Address = 192.168.0.254
> > NAS-Port = 106
> > Cisco-NAS-Port = "Serial3:10"
> > NAS-Port-Type = ISDN
> > User-Name = "test"
> > Called-Station-Id = "3552000"
> > Calling-Station-Id = "3551720"
> > Acct-Status-Type = Stop
> > Acct-Authentic = RADIUS
> > Service-Type = Framed-User
> > Acct-Session-Id = "B005"
> > Framed-Protocol = PPP
> > Acct-Link-Count = 2
> > X-Ascend-Num-In-Multilink = 1
> > Acct-Multi-Session-Id = "14165"
> > Framed-IP-Address = 193.98.116.99
> > X-Ascend-Disconnect-Cause = 45
> > X-Ascend-Pre-Input-Octets = 154
> > X-Ascend-Pre-Output-Octets = 139
> > X-Ascend-Pre-Input-Packets = 4
> > X-Ascend-Pre-Output-Packets = 5
> > Acct-Input-Octets = 666
> > Acct-Output-Octets = 394
> > Acct-Input-Packets = 26
> > Acct-Output-Packets = 19
> > X-Ascend-PreSession-Time = 1
> > Acct-Session-Time = 13
> > X-Ascend-Data-Rate = 64000
> > X-Ascend-Xmit-Rate = 64000
> > X-Ascend-Multilink-ID = 14165
> > Acct-Delay-Time = 0
> > Client-IP-Address = 192.168.1.41
> > Timestamp = 1018533274
> >
> > Thanks Dirk
> >
> > - Original Message -
> > From: "Chris Parker" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Thursday, April 11, 2002 5:27 PM
> > Subject: Re: freeradius and mysql accounting and use of called-station-id
> >
> >
> > > At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote:
> > > >Hello all,
> > > >
> > > >I use freeradius 0.5 and my NAS is a Cisco AS5300.
> > > >I test with freeradius and mysql since 2 weeks and I have 2 problems:
> > > >
> > > >The radius server writes the accounting records in the mysql-table, but
> > > >the following entries leave blank for all records:
> > > >++
> > > >AcctUniqueId
> > > >ConnectInfo_start
> > > >ConnectInfo_stop
> > > >AcctTerminateCause
> > > >NASPortId = 0 (for all records)
> > > >++
> > > >How can I fill these parameters?
> > >
> > > What do you have in 'sql.conf' for the queries? Simply adding the columns
> > > to the table definition will not fill them in. You must also alter your
> > > sql.conf to add them if they do not exist.
> > >
> > > Also, make sure you are correctly calling the 'acct_unique' module in your
> > > config.
> > >
> > > If this has been done, run the server in debugging mode, with sql tracing
> > > enabled, so you can see wh
RE: freeradius and mysql accounting and use of called-station-id
Hi,
In addition of using TCL IVR script... you will see all the information you need for
> > >++
> > >AcctUniqueId = h323-conf-id
> > >ConnectInfo_start = (not quite sure... see Cisco doc)
> > >ConnectInfo_stop = (not quite sure... see Cisco doc)
> > >AcctTerminateCause = h323-disconnect-cause
> > >NASPortId = 0 (for all records)= Cisco-NAS-Port
> > >++
-Original Message-
From: Thomas Jalsovsky [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 1:25 PM
To: [EMAIL PROTECTED]
Subject: Re: freeradius and mysql accounting and use of
called-station-id
Hello,
if you make debugging in radius server and in Cisco ('debug
radius' :), you should find, that Cisco doesn't send this attribute in the
auth. requests, therefore you cannot make auth. decision by this
attribute. I don't know that it is possible to configure Cisco to send
this attribute, I cannot make that.
Another solution: you should write/rewrite TCL IVR script and you
can send the info (e.g. called-station-id) via Cisco VSA attribute and
your FreeRADIUS server will see this through VSAs. Take a look for
h323-ivr-in and h323-ivr-out in the TCL IVR 2 documentation.
Regards,
Thomas
On Thu, 11 Apr 2002, Dirk Tanneberger wrote:
> sql.conf is o.k. and with sql tracing I see, that these values are blank.
> I think the Cisco AS5300 send not these values.
> But how can I configure AS5300 to send the parameters?
> In details-file are the following entries:
>
> Thu Apr 11 15:54:34 2002
> NAS-IP-Address = 192.168.0.254
> NAS-Port = 106
> Cisco-NAS-Port = "Serial3:10"
> NAS-Port-Type = ISDN
> User-Name = "test"
> Called-Station-Id = "3552000"
> Calling-Station-Id = "3551720"
> Acct-Status-Type = Stop
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> Acct-Session-Id = "B005"
> Framed-Protocol = PPP
> Acct-Link-Count = 2
> X-Ascend-Num-In-Multilink = 1
> Acct-Multi-Session-Id = "14165"
> Framed-IP-Address = 193.98.116.99
> X-Ascend-Disconnect-Cause = 45
> X-Ascend-Pre-Input-Octets = 154
> X-Ascend-Pre-Output-Octets = 139
> X-Ascend-Pre-Input-Packets = 4
> X-Ascend-Pre-Output-Packets = 5
> Acct-Input-Octets = 666
> Acct-Output-Octets = 394
> Acct-Input-Packets = 26
> Acct-Output-Packets = 19
> X-Ascend-PreSession-Time = 1
> Acct-Session-Time = 13
> X-Ascend-Data-Rate = 64000
> X-Ascend-Xmit-Rate = 64000
> X-Ascend-Multilink-ID = 14165
> Acct-Delay-Time = 0
> Client-IP-Address = 192.168.1.41
> Timestamp = 1018533274
>
> Thanks Dirk
>
> - Original Message -
> From: "Chris Parker" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, April 11, 2002 5:27 PM
> Subject: Re: freeradius and mysql accounting and use of called-station-id
>
>
> > At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote:
> > >Hello all,
> > >
> > >I use freeradius 0.5 and my NAS is a Cisco AS5300.
> > >I test with freeradius and mysql since 2 weeks and I have 2 problems:
> > >
> > >The radius server writes the accounting records in the mysql-table, but
> > >the following entries leave blank for all records:
> > >++
> > >AcctUniqueId
> > >ConnectInfo_start
> > >ConnectInfo_stop
> > >AcctTerminateCause
> > >NASPortId = 0 (for all records)
> > >++
> > >How can I fill these parameters?
> >
> > What do you have in 'sql.conf' for the queries? Simply adding the columns
> > to the table definition will not fill them in. You must also alter your
> > sql.conf to add them if they do not exist.
> >
> > Also, make sure you are correctly calling the 'acct_unique' module in your
> > config.
> >
> > If this has been done, run the server in debugging mode, with sql tracing
> > enabled, so you can see what sql queries are being run.
> >
> > -Chris
> > --
> > \\\|||/// \ StarNet Inc. \Chris Parker
> > \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering
> > | @ @ |\ http://www.starnetwx.net \ (847) 963-0116
> > oOo---(_)---oOo--\--
> >\ Wholesale Internet Services - http://www.megapop.net
> >
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> >
> >
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
Hello,
if you make debugging in radius server and in Cisco ('debug
radius' :), you should find, that Cisco doesn't send this attribute in the
auth. requests, therefore you cannot make auth. decision by this
attribute. I don't know that it is possible to configure Cisco to send
this attribute, I cannot make that.
Another solution: you should write/rewrite TCL IVR script and you
can send the info (e.g. called-station-id) via Cisco VSA attribute and
your FreeRADIUS server will see this through VSAs. Take a look for
h323-ivr-in and h323-ivr-out in the TCL IVR 2 documentation.
Regards,
Thomas
On Thu, 11 Apr 2002, Dirk Tanneberger wrote:
> sql.conf is o.k. and with sql tracing I see, that these values are blank.
> I think the Cisco AS5300 send not these values.
> But how can I configure AS5300 to send the parameters?
> In details-file are the following entries:
>
> Thu Apr 11 15:54:34 2002
> NAS-IP-Address = 192.168.0.254
> NAS-Port = 106
> Cisco-NAS-Port = "Serial3:10"
> NAS-Port-Type = ISDN
> User-Name = "test"
> Called-Station-Id = "3552000"
> Calling-Station-Id = "3551720"
> Acct-Status-Type = Stop
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> Acct-Session-Id = "B005"
> Framed-Protocol = PPP
> Acct-Link-Count = 2
> X-Ascend-Num-In-Multilink = 1
> Acct-Multi-Session-Id = "14165"
> Framed-IP-Address = 193.98.116.99
> X-Ascend-Disconnect-Cause = 45
> X-Ascend-Pre-Input-Octets = 154
> X-Ascend-Pre-Output-Octets = 139
> X-Ascend-Pre-Input-Packets = 4
> X-Ascend-Pre-Output-Packets = 5
> Acct-Input-Octets = 666
> Acct-Output-Octets = 394
> Acct-Input-Packets = 26
> Acct-Output-Packets = 19
> X-Ascend-PreSession-Time = 1
> Acct-Session-Time = 13
> X-Ascend-Data-Rate = 64000
> X-Ascend-Xmit-Rate = 64000
> X-Ascend-Multilink-ID = 14165
> Acct-Delay-Time = 0
> Client-IP-Address = 192.168.1.41
> Timestamp = 1018533274
>
> Thanks Dirk
>
> ----- Original Message -
> From: "Chris Parker" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, April 11, 2002 5:27 PM
> Subject: Re: freeradius and mysql accounting and use of called-station-id
>
>
> > At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote:
> > >Hello all,
> > >
> > >I use freeradius 0.5 and my NAS is a Cisco AS5300.
> > >I test with freeradius and mysql since 2 weeks and I have 2 problems:
> > >
> > >The radius server writes the accounting records in the mysql-table, but
> > >the following entries leave blank for all records:
> > >++
> > >AcctUniqueId
> > >ConnectInfo_start
> > >ConnectInfo_stop
> > >AcctTerminateCause
> > >NASPortId = 0 (for all records)
> > >++
> > >How can I fill these parameters?
> >
> > What do you have in 'sql.conf' for the queries? Simply adding the columns
> > to the table definition will not fill them in. You must also alter your
> > sql.conf to add them if they do not exist.
> >
> > Also, make sure you are correctly calling the 'acct_unique' module in your
> > config.
> >
> > If this has been done, run the server in debugging mode, with sql tracing
> > enabled, so you can see what sql queries are being run.
> >
> > -Chris
> > --
> > \\\|||/// \ StarNet Inc. \Chris Parker
> > \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering
> > | @ @ |\ http://www.starnetwx.net \ (847) 963-0116
> > oOo---(_)---oOo--\--
> >\ Wholesale Internet Services - http://www.megapop.net
> >
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> >
> >
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
"Dirk Tanneberger" <[EMAIL PROTECTED]> wrote: > I think the Cisco AS5300 send not these values. > But how can I configure AS5300 to send the parameters? Read your Cisco manual, or talk to your Cisco support person. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
sql.conf is o.k. and with sql tracing I see, that these values are blank. I think the Cisco AS5300 send not these values. But how can I configure AS5300 to send the parameters? In details-file are the following entries: Thu Apr 11 15:54:34 2002 NAS-IP-Address = 192.168.0.254 NAS-Port = 106 Cisco-NAS-Port = "Serial3:10" NAS-Port-Type = ISDN User-Name = "test" Called-Station-Id = "3552000" Calling-Station-Id = "3551720" Acct-Status-Type = Stop Acct-Authentic = RADIUS Service-Type = Framed-User Acct-Session-Id = "B005" Framed-Protocol = PPP Acct-Link-Count = 2 X-Ascend-Num-In-Multilink = 1 Acct-Multi-Session-Id = "14165" Framed-IP-Address = 193.98.116.99 X-Ascend-Disconnect-Cause = 45 X-Ascend-Pre-Input-Octets = 154 X-Ascend-Pre-Output-Octets = 139 X-Ascend-Pre-Input-Packets = 4 X-Ascend-Pre-Output-Packets = 5 Acct-Input-Octets = 666 Acct-Output-Octets = 394 Acct-Input-Packets = 26 Acct-Output-Packets = 19 X-Ascend-PreSession-Time = 1 Acct-Session-Time = 13 X-Ascend-Data-Rate = 64000 X-Ascend-Xmit-Rate = 64000 X-Ascend-Multilink-ID = 14165 Acct-Delay-Time = 0 Client-IP-Address = 192.168.1.41 Timestamp = 1018533274 Thanks Dirk - Original Message - From: "Chris Parker" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, April 11, 2002 5:27 PM Subject: Re: freeradius and mysql accounting and use of called-station-id > At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote: > >Hello all, > > > >I use freeradius 0.5 and my NAS is a Cisco AS5300. > >I test with freeradius and mysql since 2 weeks and I have 2 problems: > > > >The radius server writes the accounting records in the mysql-table, but > >the following entries leave blank for all records: > >++ > >AcctUniqueId > >ConnectInfo_start > >ConnectInfo_stop > >AcctTerminateCause > >NASPortId = 0 (for all records) > >++ > >How can I fill these parameters? > > What do you have in 'sql.conf' for the queries? Simply adding the columns > to the table definition will not fill them in. You must also alter your > sql.conf to add them if they do not exist. > > Also, make sure you are correctly calling the 'acct_unique' module in your > config. > > If this has been done, run the server in debugging mode, with sql tracing > enabled, so you can see what sql queries are being run. > > -Chris > -- > \\\|||/// \ StarNet Inc. \Chris Parker > \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering > | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 > oOo---(_)---oOo--\-- >\ Wholesale Internet Services - http://www.megapop.net > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote: >Hello all, > >I use freeradius 0.5 and my NAS is a Cisco AS5300. >I test with freeradius and mysql since 2 weeks and I have 2 problems: > >The radius server writes the accounting records in the mysql-table, but >the following entries leave blank for all records: >++ >AcctUniqueId >ConnectInfo_start >ConnectInfo_stop >AcctTerminateCause >NASPortId = 0 (for all records) >++ >How can I fill these parameters? What do you have in 'sql.conf' for the queries? Simply adding the columns to the table definition will not fill them in. You must also alter your sql.conf to add them if they do not exist. Also, make sure you are correctly calling the 'acct_unique' module in your config. If this has been done, run the server in debugging mode, with sql tracing enabled, so you can see what sql queries are being run. -Chris -- \\\|||/// \ StarNet Inc. \Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius and mysql accounting and use of called-station-id
Hello all, I use freeradius 0.5 and my NAS is a Cisco AS5300. I test with freeradius and mysql since 2 weeks and I have 2 problems: The radius server writes the accounting records in the mysql-table, but the following entries leave blank for all records: ++ AcctUniqueId ConnectInfo_start ConnectInfo_stop AcctTerminateCause NASPortId = 0 (for all records) ++ How can I fill these parameters? My AS5300 config: ++ aaa accounting delay-start aaa accounting exec default start-stop group radius aaa accounting network default start-stop group radius radius-server attribute 44 include-in-access-req radius-server attribute nas-port format c radius-server vsa send accounting ++ My second problem is the use of Called-Station-ID. Is there a way to define two or more Called-Station-Id for one user? What I mean is, that a user can dial in several services. For the first service, he called 34567 and for the second service he called 34568. When I define both, Called-Station-Id = 34567 and Called-Station-Id = 34568, dial in is not possible. The same is, when I define Called-Station-Id = 3456 or Called-Station-Id = 3456*. Can I use wildcards or what can I do to solve this problem? Thanks for any answer. regards Dirk Tanneberger - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
