No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

After PPPoE Authentication and Portal Authentication Are Enabled on an ME60 in a Campus Network, Incorrect Third-Party Authentication Platform Parameter Settings Lead to a PPPoE Authentication Failure

Publication Date:  2019-03-27 Views:  102 Downloads:  0
Issue Description
 Device model: ME60 V600R009C20SPC600

After both PPPoE authentication and portal authentication are enabled, portal authentication succeeds, but PPPoE users fail to obtain IP addresses. It is found that third-party authentication platform succeeds in authentication, but users fail to go online properly.


Handling Process

Jun 20 2018 17:04:36.880.1+08:00 nongda_ME60 BTRC/7/BTRC_TraceInfo:[objectID=1][slotID=0][RADIUS][user info:

  MAC Address    : 089E-0119-36B0

  IP Address     : 255.255.255.255

  Interface      : GigabitEthernet1/0/1.2

  PE VLAN ID     : 2108

  CE VLAN ID     : 4

  User Name      : test@test]

[trace info:

  Radius Received a Packet

  Server Template: 0

  Server IP   : 172.16.121.9

  NAS IP      : 172.16.121.14

  Vpn-Instance: -

 Server Port : 1812

  NAS Port    : 1812

  Protocol: Standard

  Code    : Authentication accept

  Len     : 145

  ID      : 20

  [Reply-Message(18)                  ] [35] [Welcome to Drcom System:158929068]

  [Session-Timeout(27)                ] [6 ] [172800000]

  [Acct-Interim-Interval(85)          ] [6 ] [210]

  [Service-Type(6)                    ] [6 ] [2] [Framed]

  [Framed-Protocol(7)                 ] [6 ] [1] [PPP]

  [HW-Remanent-Volume(Huawei-15)      ] [6 ] [4294967295]

  [HW-Input-Committed-Information-Rate(Huawei-2)] [6 ] [507904000]

  [HW-Input-Peak-Information-Rate(Huawei-3)] [6 ] [507904000]

[nongda_ME60]

Jun 20 2018 17:04:36.880.2+08:00 nongda_ME60 BTRC/7/BTRC_TraceInfo:

  [HW-Output-Committed-Information-Rate(Huawei-5)] [6 ] [507904000]


  [HW-Output-Peak-Information-Rate(Huawei-6)] [6 ] [507904000]

  [Framed-IP-Address(8)               ] [6 ] [255.255.255.254]]

Root Cause

The third party authentication platform (RADIUS server) delivers IP addresses through the framed-ip-address attribute.

 


Solution

Contact RADIUS engineers to cancel the framed-ip-address attribute before testing PPPoE user online.

Suggestions

In most cases, ME60s need to be interconnected with third-party devices. During interconnection, ensure that Huawei devices are properly configured before communicating with the third-party authentication platform. Perform tests after unwanted attributes are deleted.

END