Page 1 of 1

No RADIUS interim accounting packets sent

Posted: 11 Dec 2019, 19:27
by lbw
Hi

I am using accel-ppp version 1.12.0 with PPP over L2TP clients.

Configuration is:

[modules]
log_file
l2tp
auth_mschap_v1
auth_chap_md5
auth_pap
radius
ippool
shaper

...

[radius]
dictionary=/usr/local/share/accel-ppp/radius/dictionary
nas-identifier=accel-ppp
nas-ip-address=a.b.c.d
gw-ip-address=a.b.c.d
server=1.2.3.4,secret,auth-port=1812,acct-port=1813,req-limit=50,fail-timeout=0,max-fail=10,weight=1,acct-interim-interval=900
server=1,2,3,5,secret,auth-port=1812,acct-port=1813,req-limit=50,fail-timeout=0,max-fail=10,weight=2,acct-interim-interval=900
dae-server=a.b.c.d:3799,secret
verbose=1
interim-verbose=1
max-try=3
acct-timeout=120

# grep -ic interim /var/log/accel-ppp/accel-ppp.log
0

radius(1, 1.2.3.5):
state: active
fail count: 0
request count: 0
queue length: 0
auth sent: 893
auth lost(total/5m/1m): 0/0/0
auth avg query time(5m/1m): 963/1002 ms
acct sent: 345
acct lost(total/5m/1m): 0/0/0
acct avg query time(5m/1m): 4/0 ms
interim sent: 0
interim lost(total/5m/1m): 0/0/0
interim avg query time(5m/1m): 0/0 ms

radius(2, 1.2.3.5):
state: active
fail count: 0
request count: 0
queue length: 0
auth sent: 57
auth lost(total/5m/1m): 0/0/0
auth avg query time(5m/1m): 0/0 ms
acct sent: 66
acct lost(total/5m/1m): 0/0/0
acct avg query time(5m/1m): 0/0 ms
interim sent: 0
interim lost(total/5m/1m): 0/0/0
interim avg query time(5m/1m): 0/0 ms

I am not seeing any RADIUS interim packets being sent to the RADIUS servers. It's as if they are not being triggered within accel-ppp at all.

Anyone else have this problem or have actual working interim RADIUS packets being sent?

Thanks

Re: No RADIUS interim accounting packets sent

Posted: 12 Dec 2019, 05:02
by Axiator
Check "Acct-Interim-Interval" from Access-Accept packet.

Re: No RADIUS interim accounting packets sent

Posted: 12 Dec 2019, 07:25
by lbw
I shouldn't be required to push a Acct-Interim-Interval attribute in the RADIUS auth reply packet. The configuration should be sufficient.

However, I've tried it with that in the auth reply and note that interim accounting then works. I'd rather not to have to set it so looks like there's a bug there.

I tried setting Acct-Interim-Interval using CoA for existing sessions that aren't generating an interim packet and even though there's a CoA-ACK, it doesn't work.I sent:

Sending CoA-Request of id 13 to 1.2.3.4 port 3799

Acct-Session-Id = "7317a647d924da58"
Acct-Interim-Interval = 60

I got CoA-ACK packet from host 1.2.3.4:3799, id=116, length=20

Re: No RADIUS interim accounting packets sent

Posted: 12 Dec 2019, 08:08
by Axiator
Maybe acct-interim-interval=900 in radius section (from man accel-ppp.conf) will be a solution?
Not in server string.

Re: No RADIUS interim accounting packets sent

Posted: 20 Dec 2019, 04:06
by lbw
That was indeed the problem. Documentation not clear but I should have checked the code more carefully. D'oh.

Re: No RADIUS interim accounting packets sent

Posted: 20 Dec 2019, 05:45
by Axiator
Good :)