Discussion:
Radius Attribute
Maile Halatuituia
2018-10-14 09:46:41 UTC
Permalink
I have this on my radius packet send from my Cisco ASR 1001 with IPv6 enable to my Radius Accounting Server.

*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 35
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 29 "connect-progress=LAN Ses Up"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 31
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 25 "nas-tx-speed=1000000000"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 31
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 25 "nas-rx-speed=1000000000"
*Oct 14 22:14:43.752: RADIUS: Acct-Session-Time [46] 6 79768
*Oct 14 22:14:43.752: RADIUS: Acct-Input-Octets [42] 6 1063443
*Oct 14 22:14:43.752: RADIUS: Acct-Output-Octets [43] 6 1480018
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 37
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 35
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 29 "connect-progress=LAN Ses Up"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 31
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 25 "nas-tx-speed=1000000000"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 31
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 25 "nas-rx-speed=1000000000"
*Oct 14 22:14:43.752: RADIUS: Acct-Session-Time [46] 6 79768
*Oct 14 22:14:43.752: RADIUS: Acct-Input-Octets [42] 6 1063443
*Oct 14 22:14:43.752: RADIUS: Acct-Output-Octets [43] 6 1480018
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 37
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 31 "acct-input-octets-ipv6=444093"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 38
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 32 "acct-output-octets-ipv6=871971"
*Oct 14 22:14:43.752: RADIUS: Acct-Input-Packets [47] 6 21676
*Oct 14 22:14:43.752: RADIUS: Acct-Output-Packets [48] 6 24477
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 36
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 30 "acct-input-packets-ipv6=8250"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 37
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 31 "acct-output-packets-ipv6=8719"
*Oct 14 22:14:43.752: RADIUS: Acct-Authentic [45] 6 RADIUS [1]
*Oct 14 22:14:43.752: RADIUS: Acct-Status-Type [40] 6 Watchdog [3]
*Oct 14 22:14:43.752: RADIUS: NAS-Port-Type [61] 6 Ethernet [15]
*Oct 14 22:14:43.752: RADIUS: NAS-Port [5] 6 111
*Oct 14 22:14:43.752: RADIUS: NAS-Port-Id [87] 11 "0/0/0/111"
*Oct 14 22:14:43.752: RADIUS: Connect-Info [77] 15 "ACCESS-STATIC"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 41
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 35 "client-mac-address=ae6e.0e44.ea8b"
*Oct 14 22:14:43.752: RADIUS: Service-Type [6] 6 Framed [2]
*Oct 14 22:14:43.752: RADIUS: NAS-IP-Address [4] 6 10.254.36.190
*Oct 14 22:14:43.752: RADIUS: home-hl-prefix [151] 10 "65738A12"
*Oct 14 22:14:43.752: RADIUS: Event-Timestamp [55] 6 1539508483


*Oct 14 22:14:43.752: RADIUS: Acct-Input-Packets [47] 6 21676
*Oct 14 22:14:43.752: RADIUS: Acct-Output-Packets [48] 6 24477
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 36
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 30 "acct-input-packets-ipv6=8250"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 37
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 31 "acct-output-packets-ipv6=8719"
*Oct 14 22:14:43.752: RADIUS: Acct-Authentic [45] 6 RADIUS [1]
*Oct 14 22:14:43.752: RADIUS: Acct-Status-Type [40] 6 Watchdog [3]
*Oct 14 22:14:43.752: RADIUS: NAS-Port-Type [61] 6 Ethernet [15]
*Oct 14 22:14:43.752: RADIUS: NAS-Port [5] 6 111
*Oct 14 22:14:43.752: RADIUS: NAS-Port-Id [87] 11 "0/0/0/111"
*Oct 14 22:14:43.752: RADIUS: Connect-Info [77] 15 "VRF"
*Oct 14 22:14:43.752: RADIUS: Vendor, Cisco [26] 41
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 35 "client-mac-address"
*Oct 14 22:14:43.752: RADIUS: Service-Type [6] 6 Framed [2]
*Oct 14 22:14:43.752: RADIUS: NAS-IP-Address [4] 6 IP
*Oct 14 22:14:43.752: RADIUS: home-hl-prefix [151] 10 "65738A12"
*Oct 14 22:14:43.752: RADIUS: Event-Timestamp [55] 6 1539508483

Note the ipv6 octect counter is normal but my issue comes when i try to add the ipv6 counter to my radius databases to process and it says it is unknown attribute
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 31 "acct-input-octets-ipv6=444093"
*Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 32 "acct-output-octets-ipv6=871971"


?


Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.
-
List info/subscribe/unsu
Alan DeKok
2018-10-14 13:03:25 UTC
Permalink
On Oct 14, 2018, at 5:46 AM, Maile Halatuituia <***@tcc.to> wrote:
>
> I have this on my radius packet send from my Cisco ASR 1001 with IPv6 enable to my Radius Accounting Server.

Read the documentation, and do what it says:

http://wiki.freeradius.org/list-help

We *don't* need the information you posted. We *do* need you to follow the documentation, and post the information it says to post.

> Note the ipv6 octect counter is normal but my issue comes when i try to add the ipv6 counter to my radius databases

What does that mean?

Instead of asking a vague question, you could say what you *actually did*.

> to process and it says it is unknown attribute
> *Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 31 "acct-input-octets-ipv6=444093"
> *Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 32 "acct-output-octets-ipv6=871971"

Hmm... there's no error here. I guess it's a total mystery.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/l
Maile Halatuituia
2018-10-14 19:52:43 UTC
Permalink
Hi Alan
Sorry for my first post I am new to the list and I did not read the info before I send my question. I hope this reply can help make that right.
Here is what I want to do.
I already have an IPv4 PPPoE Setup working ok. And I want to add IPv6 alongside as dual stack. Everything is working fine but I want to confirm the octets counter. What we do with ipv4 is calculate the usage based on the attribute below send from our Router to the FreeRadius ACCt Server.

Acct-Input-Octets=xxx
Acct-Output-Octets=xxx

Now with IPv6 enable I also see extra Cisco AVPair send from the BRAS to the Radius ACCt Server listed below

Cisco-AVPair = "acct-input-octets-ipv6=xxx"
Cisco-AVPair = "acct-output-octets-ipv6=xxx"

My question is should I add up these two counters for the total user usage or the ipv6 counter is already include on the previous two counters (Acct-Input-Octets and Acct-Output-Octets) for the total cdr.

I hope this makes sense.

Thank You Once Again.
ICT Team.

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+maile.halatuituia=***@lists.freeradius.org] On Behalf Of Alan DeKok
Sent: Monday, 15 October 2018 2:03 a.m.
To: FreeRadius users mailing list
Subject: Re: Radius Attribute

On Oct 14, 2018, at 5:46 AM, Maile Halatuituia <***@tcc.to> wrote:
>
> I have this on my radius packet send from my Cisco ASR 1001 with IPv6 enable to my Radius Accounting Server.

Read the documentation, and do what it says:

http://wiki.freeradius.org/list-help

We *don't* need the information you posted. We *do* need you to follow the documentation, and post the information it says to post.

> Note the ipv6 octect counter is normal but my issue comes when i try to add the ipv6 counter to my radius databases

What does that mean?

Instead of asking a vague question, you could say what you *actually did*.

> to process and it says it is unknown attribute
> *Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 31 "acct-input-octets-ipv6=444093"
> *Oct 14 22:14:43.752: RADIUS: Cisco AVpair [1] 32 "acct-output-octets-ipv6=871971"

Hmm... there's no error here. I guess it's a total mystery.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.

-
List info/subscribe/unsub
Alan DeKok
2018-10-14 20:02:38 UTC
Permalink
On Oct 14, 2018, at 3:52 PM, Maile Halatuituia <***@tcc.to> wrote:
> Now with IPv6 enable I also see extra Cisco AVPair send from the BRAS to the Radius ACCt Server listed below
>
> Cisco-AVPair = "acct-input-octets-ipv6=xxx"
> Cisco-AVPair = "acct-output-octets-ipv6=xxx"
>
> My question is should I add up these two counters for the total user usage or the ipv6 counter is already include on the previous two counters (Acct-Input-Octets and Acct-Output-Octets) for the total cdr.

Those are Cisco attributes. They're not standard attributes. Ask Cisco how their equipment works.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/l
Maile Halatuituia
2018-10-14 20:07:35 UTC
Permalink
Hi Alan
Appreciate you directly answer my question and it gives me direction where to go next.
Cheers.
Thank You Once Again.
ICT Team.

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+maile.halatuituia=***@lists.freeradius.org] On Behalf Of Alan DeKok
Sent: Monday, 15 October 2018 9:03 a.m.
To: FreeRadius users mailing list
Subject: Re: Radius Attribute

On Oct 14, 2018, at 3:52 PM, Maile Halatuituia <***@tcc.to> wrote:
> Now with IPv6 enable I also see extra Cisco AVPair send from the BRAS to the Radius ACCt Server listed below
>
> Cisco-AVPair = "acct-input-octets-ipv6=xxx"
> Cisco-AVPair = "acct-output-octets-ipv6=xxx"
>
> My question is should I add up these two counters for the total user usage or the ipv6 counter is already include on the previous two counters (Acct-Input-Octets and Acct-Output-Octets) for the total cdr.

Those are Cisco attributes. They're not standard attributes. Ask Cisco how their equipment works.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users
Maile Halatuituia
2018-10-14 20:22:33 UTC
Permalink
Hi alan
I forgot to mention I tried to include these Cisco attribute on my accounting but the radius says it is an unknown attribute. So at least if you have some lead to where I can check whether my radius configuration is wrong or else.

Thank You Once Again.
ICT Team.

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+maile.halatuituia=***@lists.freeradius.org] On Behalf Of Alan DeKok
Sent: Monday, 15 October 2018 9:03 a.m.
To: FreeRadius users mailing list
Subject: Re: Radius Attribute

On Oct 14, 2018, at 3:52 PM, Maile Halatuituia <***@tcc.to> wrote:
> Now with IPv6 enable I also see extra Cisco AVPair send from the BRAS to the Radius ACCt Server listed below
>
> Cisco-AVPair = "acct-input-octets-ipv6=xxx"
> Cisco-AVPair = "acct-output-octets-ipv6=xxx"
>
> My question is should I add up these two counters for the total user usage or the ipv6 counter is already include on the previous two counters (Acct-Input-Octets and Acct-Output-Octets) for the total cdr.

Those are Cisco attributes. They're not standard attributes. Ask Cisco how their equipment works.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.

-
List info/subscribe/unsubscribe? See http://www.fr
Winfield, Alister
2018-10-15 06:53:59 UTC
Permalink
Just so you spot what might be the obvious error those are both 'Cisco-AVPair' RADIUS attributes with STRING values that happen to be key=value pairs. FR doesn't magically unpick the string value "acct-input-octets-ipv6=xxx" (Thanks CISCO for just exposing parts of the configuration in RADIUS attributes rather than converting them to real RADIUS attributes).

I believe it is possible to unpick such strings to make them usable as you might expect. I haven't had to do it so don't have a handy example immediately to hand.

Alister


Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky plc and Sky International AG and are used under licence.

Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075), Sky Subscribers Services Limited (Registration No. 2340150) and Sky CP Limited (Registration No. 9513259) are direct or indirect subsidiaries of Sky plc (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD

-
List info/subscribe/unsubs
Maile Halatuituia
2018-10-15 08:53:19 UTC
Permalink
Hi Alister
Thanks for your kind information ... Well i will continue to look around if i will be able to find anything that will help in my case and solve the issue , i surely will share if it will help someone else.
________________________________________
From: Freeradius-Users <freeradius-users-bounces+maile.halatuituia=***@lists.freeradius.org> on behalf of Winfield, Alister <***@sky.uk>
Sent: Monday, October 15, 2018 7:53 PM
To: FreeRadius users mailing list
Subject: Re: [EXTERNAL] RE: Radius Attribute

Just so you spot what might be the obvious error those are both 'Cisco-AVPair' RADIUS attributes with STRING values that happen to be key=value pairs. FR doesn't magically unpick the string value "acct-input-octets-ipv6=xxx" (Thanks CISCO for just exposing parts of the configuration in RADIUS attributes rather than converting them to real RADIUS attributes).

I believe it is possible to unpick such strings to make them usable as you might expect. I haven't had to do it so don't have a handy example immediately to hand.

Alister


Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky plc and Sky International AG and are used under licence.

Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075), Sky Subscribers Services Limited (Registration No. 2340150) and Sky CP Limited (Registration No. 9513259) are direct or indirect subsidiaries of Sky plc (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/u
Continue reading on narkive:
Loading...