No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

PPPoE Users Failed to Go Online Due to Incorrect Priority Attribute Delivered by the RADIUS Server

Publication Date:  2013-10-29 Views:  44 Downloads:  0
Issue Description

Version: ME60 V600R002C02SPC700

Network topology: STB  ------ MSAN ------ (METRO-E) ------ ME60 ------ RADIUS server

Symptom:

PPPoE users failed to go online.
Handling Process

Possible causes included:

1. Online request packets were exchanged improperly.

2. The RADIUS server failed to the authentication.

3. Attributes delivered by the RADIUS server were incorrect.

To address the issue, Huawei performed the following operations and observed the following information:

1. Checked trace information in ME60. For details, see the attachment (ppp_trace.txt)

Packets were properly exchanged and LCP exchange was normal.

2. Checked trace information of the AAA server and found that user failed AAA authentication.

Dec 17 2012 17:34:56.640.5 ME60-X8 BTRC/7/BTRC_DebugInfo:[objectID=1][slotID=0][AAA][user info:
  MAC Address    : C89C-DC39-C218
  IP Address     : 255.255.255.255
  Interface      : GigabitEthernet1/0/2.2
  PE VLAN ID     : 2
  USERNAME       : kongqb@pppoe]
[trace info:
  User authen fail, -]  --- authentication failed

3. Checked trace information about the RADIUS module and found that it had received response from the RADIUS server.

Dec 17 2012 17:34:56.620.10 ME60-X8 BTRC/7/BTRC_DebugInfo:[objectID=1][slotID=0][RADIUS][user info:
  MAC Address    : C89C-DC39-C218
  IP Address     : 255.255.255.255
  Interface      : GigabitEthernet1/0/2.2
  PE VLAN ID     : 2
  USERNAME       : kongqb@pppoe]
[trace info:
  Radius Sent a Packet
  Server Template: 0
  Server IP   : 172.28.32.1
  Vpn-Instance: -
  NAS Port    : 1812
  Protocol: IPhotel
  Code    : Authentication request 
  Len     : 264
  ID      : 255
  [User-Name(1)                       ] [8 ] [kongqb]
  [CHAP-Password(3)                   ] [19] [019c6556ae609b9ed7b5cedf91ad8a38b7]
  [CHAP-Challenge(60)                 ] [18] [28c49c9d31516670e3d075a9802b3632]
  
Dec 17 2012 17:34:56.640.1 ME60-X8 BTRC/7/BTRC_DebugInfo:[objectID=1][slotID=0][RADIUS][user info:
  MAC Address    : C89C-DC39-C218
  IP Address     : 255.255.255.255
  Interface      : GigabitEthernet1/0/2.2
  PE VLAN ID     : 2
  USERNAME       : kongqb@pppoe]
[trace info:
  Radius Received a Packet
  Server Template: 0
  Server IP   : 172.28.32.1
  Vpn-Instance: -
  Server Port : 1812
  NAS Port    : 1812
  Protocol: IPhotel
  Code    : Authentication accept   
  Len     : 143
  ID      : 255
  [User-Name(1)                       ] [8 ] [kongqb]
  [Service-Type(6)                    ] [6 ] [2]
  [State(24)                          ] [10] [4e4f527562724f51]
  [Termination-Action(29)             ] [6 ] [0]  --Abnormal attribute
  [Framed-IP-Address(8)               ] [6 ] [172.28.158.56]
  [Filter-Id(11)                      ] [4 ] [1m]
  [Session-Timeout(27)                ] [6 ] [2592001]
  [Acct-Interim-Interval(85)          ] [6 ] [600]
  [HW-Up-Priority(Huawei-61)          ] [65] [906362880]] -- Abormal attribute

4. Checked attributes delivered by the RADIUS server and found that Termination-Action(29) and HW-Up-Priority(Huawei-61) might be incorrect. Termination-Action(29) indicated the NAS service termination mode. The value 0 indicates online and 1 indicates re-authentication. According to the above data, Termination-Action(29) was correct.

interface GigabitEthernet1/0/2.2
 pppoe-server bind Virtual-Template 1
 description pppoe
 control-flap
 user-vlan 2
 bas
  access-type layer2-subscriber default-domain authentication pppoe
  authentication-method ppp fast

The value range of HW-Up-Priority(Huawei-61) was 0-13 and 15.

0 to 7: common priorities

8: DSCP value being used as user priority

9: inner 802.1p value of a Layer 2 packet being used as user priority

10: outer 802.1p value of a Layer 2 packet being used as user priority

11: inner EXP value of an MPLS packet being used a user priority

12: outer EXP value of an MPLS packet being used a user priority

13: inner DSCP value of an L2TP packet being used as user priority

15: user priority not changed

The value of HW-Up-Priority(Huawei-61) delivered by the RADIUS was 906362880, beyond the allowed range. Therefore, users failed to go online.
Root Cause
The value of HW-Up-Priority(Huawei-61) delivered by the RADIUS was beyond the allowed range.
Solution
Modify HW-Up-Priority(Huawei-61).
Suggestions
When encountering similar problems, check whether attributes delivered by the RADIUS server are correct.

END