No RADIUS interim accounting packets sent

Radius related questions
Post Reply
lbw
Posts: 27
Joined: 09 Mar 2019, 00:16

No RADIUS interim accounting packets sent

Post by lbw »

Hi

I am using accel-ppp version 1.12.0 with PPP over L2TP clients.

Configuration is:

[modules]
log_file
l2tp
auth_mschap_v1
auth_chap_md5
auth_pap
radius
ippool
shaper

...

[radius]
dictionary=/usr/local/share/accel-ppp/radius/dictionary
nas-identifier=accel-ppp
nas-ip-address=a.b.c.d
gw-ip-address=a.b.c.d
server=1.2.3.4,secret,auth-port=1812,acct-port=1813,req-limit=50,fail-timeout=0,max-fail=10,weight=1,acct-interim-interval=900
server=1,2,3,5,secret,auth-port=1812,acct-port=1813,req-limit=50,fail-timeout=0,max-fail=10,weight=2,acct-interim-interval=900
dae-server=a.b.c.d:3799,secret
verbose=1
interim-verbose=1
max-try=3
acct-timeout=120

# grep -ic interim /var/log/accel-ppp/accel-ppp.log
0

radius(1, 1.2.3.5):
state: active
fail count: 0
request count: 0
queue length: 0
auth sent: 893
auth lost(total/5m/1m): 0/0/0
auth avg query time(5m/1m): 963/1002 ms
acct sent: 345
acct lost(total/5m/1m): 0/0/0
acct avg query time(5m/1m): 4/0 ms
interim sent: 0
interim lost(total/5m/1m): 0/0/0
interim avg query time(5m/1m): 0/0 ms

radius(2, 1.2.3.5):
state: active
fail count: 0
request count: 0
queue length: 0
auth sent: 57
auth lost(total/5m/1m): 0/0/0
auth avg query time(5m/1m): 0/0 ms
acct sent: 66
acct lost(total/5m/1m): 0/0/0
acct avg query time(5m/1m): 0/0 ms
interim sent: 0
interim lost(total/5m/1m): 0/0/0
interim avg query time(5m/1m): 0/0 ms

I am not seeing any RADIUS interim packets being sent to the RADIUS servers. It's as if they are not being triggered within accel-ppp at all.

Anyone else have this problem or have actual working interim RADIUS packets being sent?

Thanks
Axiator
Posts: 22
Joined: 22 Feb 2017, 16:06

Re: No RADIUS interim accounting packets sent

Post by Axiator »

Check "Acct-Interim-Interval" from Access-Accept packet.
lbw
Posts: 27
Joined: 09 Mar 2019, 00:16

Re: No RADIUS interim accounting packets sent

Post by lbw »

I shouldn't be required to push a Acct-Interim-Interval attribute in the RADIUS auth reply packet. The configuration should be sufficient.

However, I've tried it with that in the auth reply and note that interim accounting then works. I'd rather not to have to set it so looks like there's a bug there.

I tried setting Acct-Interim-Interval using CoA for existing sessions that aren't generating an interim packet and even though there's a CoA-ACK, it doesn't work.I sent:

Sending CoA-Request of id 13 to 1.2.3.4 port 3799

Acct-Session-Id = "7317a647d924da58"
Acct-Interim-Interval = 60

I got CoA-ACK packet from host 1.2.3.4:3799, id=116, length=20
Axiator
Posts: 22
Joined: 22 Feb 2017, 16:06

Re: No RADIUS interim accounting packets sent

Post by Axiator »

Maybe acct-interim-interval=900 in radius section (from man accel-ppp.conf) will be a solution?
Not in server string.
lbw
Posts: 27
Joined: 09 Mar 2019, 00:16

Re: No RADIUS interim accounting packets sent

Post by lbw »

That was indeed the problem. Documentation not clear but I should have checked the code more carefully. D'oh.
Axiator
Posts: 22
Joined: 22 Feb 2017, 16:06

Re: No RADIUS interim accounting packets sent

Post by Axiator »

Good :)
Post Reply