FAQ-How to Troubleshoot that MA5200 Fails in Radius Accounting

Publication Date:  2012-07-27 Views:  85 Downloads:  0
Issue Description
Q: How to troubleshoot that MA5200 fails in radius accounting?
Alarm Information
Null
Handling Process
A:
RADIUS accounting packets are transmitted after successful authentication of users. If the debugging switch for RADIUS is turned on, you can see the normal authentication process, but you cannot see the accounting request packets transmitted by MA5200. This is because the accounting is not set to RADIUS. Set the accounting policy in the user authentication domain to RADIUS accounting, and the problem can be solved. 
RADIUS accounting failure refers to that MA5200 transmits accounting request packets to RADIUS after the user passes authentication, but RADIUS does not respond. For instance: 
* [0.26303030-] RDS-8-02033000:                                                 
  Radius Recieved a Packet                                                      
  Server Group: 2                                                               
  Server IP   : 10.164.45.213                                                   
  Server Port : 1645                                                            
  Protocol: Standard                                                            
  Code    : 2                                                                   
  Len     : 20                                                                  
  ID      : 4                                                                   
 
\\MA5200 transmits accounting request packet code=4 once it receives the packets indicating success of authentication.
* [0.26303110-] RDS-8-02033000:                                                 
  Radius Sent a Packet                                                          
  Server Group: 2                                                               
  Server IP   : 10.164.45.213                                                   
  Protocol: Standard                                                            
  Code    : 4                                                                   
  Len     : 263                                                                 
  ID      : 0                                                                   
  [User-name(1)                       ] [12] [user@huawei]                       
  [NAS-Port(5)                        ] [6 ] [4096]                             
  [Framed-IP-Address(8)               ] [6 ] [192.168.1.254]                    
  [Filter-ID(11)                      ] [5 ] [0@0]                              
  [NAS-Identifier(32)                 ] [9 ] [MA5200F]                          
  [Acct-Status-Type(40)               ] [6 ] [1]                                
  [Acct-Delay-Time(41)                ] [6 ] [0]                                
  [Acct-Session-Id(44)] [34] [MA5200F0408051640516a1c0d9200004] 
  [Acct-Authentic(45)                 ] [6 ] [1]                                
  [Event-Timestamp(55)                ] [6 ] [1091724051]                       
  [NAS-Port-Type(61)                  ] [6 ] [15]                               
  [Calling-Station-Id(31)             ] [19] [00:06:5b:6c:aa:f9]                
  [NAS-Port-Id(87)] [34] [slot=0;subslot=0;port=1;vlanid=0] 
  [Ip-Host-Addr(26-60)] [33] [192.168.1.254 00:06:5b:6c:aa:f9]  
  [Input_Peak_Rate(26-1)              ] [6 ] [52428800]                         
  [Input_Average_Rate(26-2)           ] [6 ] [10485760]                         
  [Output_Peak_Rate(26-4)             ] [6 ] [52428800]                         
  [Output_Average_Rate(26-5)          ] [6 ] [10485760]                         
  [Priority(26-22)                    ] [6 ] [0]                                
  [Connect_ID(26-26)                  ] [6 ] [4]                                
  [Domain-name(26-138)                ] [7 ] [huawei]                            
  [NAS-IP-Address(4)                  ] [6 ] [10.164.45.42]                     
 
Root Cause
Null
Suggestions
\\Accounting request packets get no response, and it transmits again. 
* [0.26308100-] RDS-8-02033000:                                                 
  Radius Sent a Packet                                                          
  Server Group: 2                                                               
  Server IP   : 10.164.45.213                                                   
  Protocol: Standard                                                            
  Code    : 4                                                                   
  Len     : 263                                                                 
  ID      : 1                                                                   
  [User-name(1)                       ] [12] [user@huawei]                       
  [NAS-Port(5)                        ] [6 ] [4096]                             
  [Framed-IP-Address(8)               ] [6 ] [192.168.1.254]                    
  [Filter-ID(11)                      ] [5 ] [0@0]                              
  [NAS-Identifier(32)                 ] [9 ] [MA5200F]                          
  [Acct-Status-Type(40)               ] [6 ] [1]                                
  [Acct-Delay-Time(41)                ] [6 ] [5]                                
  [Acct-Session-Id(44)] [34] [MA5200F0408051640516a1c0d9200004] 
  [Acct-Authentic(45)                 ] [6 ] [1]                                
  [Event-Timestamp(55)                ] [6 ] [1091724051]                       
  [NAS-Port-Type(61)                  ] [6 ] [15]                               
  [Calling-Station-Id(31)             ] [19] [00:06:5b:6c:aa:f9]                
  [NAS-Port-Id(87)] [34] [slot=0;subslot=0;port=1;vlanid=0] 
  [Ip-Host-Addr(26-60)] [33] [192.168.1.254 00:06:5b:6c:aa:f9]  
* [0.26308100-] RDS-8-02033000:                                                 
  [Input_Peak_Rate(26-1)              ] [6 ] [52428800]                         
  [Input_Average_Rate(26-2)           ] [6 ] [10485760]                         
  [Output_Peak_Rate(26-4)             ] [6 ] [52428800]                         
  [Output_Average_Rate(26-5)          ] [6 ] [10485760]                         
  [Priority(26-22)                    ] [6 ] [0]                                
  [Connect_ID(26-26)                  ] [6 ] [4]                                
  [Domain-name(26-138)                ] [7 ] [huawei]                            
  [NAS-IP-Address(4)                  ] [6 ] [10.164.45.42]                     
* [0.26313100-] RDS-8-02033000:                                                 
  Radius Sent a Packet                                                          
  Server Group: 2                                                               
  Server IP   : 10.164.45.213                                                   
  Protocol: Standard                                                            
  Code    : 4                                                                   
  Len     : 263                                                                 
  ID      : 2                                                                   
  [User-name(1)                       ] [12] [user@huawei]                       
  [NAS-Port(5)                        ] [6 ] [4096]                             
  [Framed-IP-Address(8)               ] [6 ] [192.168.1.254]                    
  [Filter-ID(11)                      ] [5 ] [0@0]                              
  [NAS-Identifier(32)                 ] [9 ] [MA5200F]                          
  [Acct-Status-Type(40)               ] [6 ] [1]                                
  [Acct-Delay-Time(41)                ] [6 ] [10]                               
  [Acct-Session-Id(44)] [34] [MA5200F0408051640516a1c0d9200004] 
  [Acct-Authentic(45)                 ] [6 ] [1]                                
  [Event-Timestamp(55)                ] [6 ] [1091724051]                       
  [NAS-Port-Type(61)                  ] [6 ] [15]                               
  [Calling-Station-Id(31)             ] [19] [00:06:5b:6c:aa:f9]                
  [NAS-Port-Id(87)] [34] [slot=0;subslot=0;port=1;vlanid=0] 
  [Ip-Host-Addr(26-60)] [33] [192.168.1.254 00:06:5b:6c:aa:f9]  
  [Input_Peak_Rate(26-1)              ] [6 ] [52428800]                         
  [Input_Average_Rate(26-2)           ] [6 ] [10485760]                         
  [Output_Peak_Rate(26-4)             ] [6 ] [52428800]                         
  [Output_Average_Rate(26-5)          ] [6 ] [10485760]                         
  [Priority(26-22)                    ] [6 ] [0]                                
  [Connect_ID(26-26)                  ] [6 ] [4]                                
  [Domain-name(26-138)                ] [7 ] [huawei]                            
  [NAS-IP-Address(4)                  ] [6 ] [10.164.45.42]                     
 \\By default, if the accounting packets get no response for three times, MA5200 sets RADIUS server to DOWN and prints alarm: Auser fails to start accounting 
# [08/05/2004 16:41:06-] RDS-5-02032001:RADIUS accounting server(IP 10.164.45.213) is down!                                                                     
% [08/05/2004 16:41:06-] AAA-5-02041000:  user@huawei                            
  NormalAcct-StartFail                                                          
% [08/05/2004 16:41:06-] AAA-5-02041000:  MA5200F0408051640516a1c0d9200004      
  NormalAcct-StartFail
Besides accounting-start failure, accounting failure includes ongoing-accounting failure, with printing information as follows: 
# [08/05/2004 16:41:06-] RDS-5-02032001:RADIUS accounting server(IP 10.164.45.213) is down!                                                                     
% [08/05/2004 16:41:06-] AAA-5-02041000:  user@huawei                            
  NormalAcct-RealFail                                                          
% [08/05/2004 16:41:06-] AAA-5-02041000:  MA5200F0408051640516a1c0d9200004      
  NormalAcct-RealFail
For the troubleshooting of the problem, it is similar to that for no response for authentication. 

END