Проверка работы радиуса между Cisco и биллингом на FreeBSD

[phrozen]

собственно как проверить работу радиуса, и при включении выключении наблюдаются следующие ошибки

Код: Выделить всё

?Debug : Jun 01 13:02:09 StreamFirewall: Got 'exec' command...
?Debug &#58; Jun 01 13&#58;02&#58;09 FWCntl&#58; Send rule<clear access-template 106 test2 any host 192.168.0.50> to remote
 cisco <10.0.0.2>
?Debug &#58; Jun 01 13&#58;02&#58;09 FWCntl&#58; Call RSH&#58; host 10.0.0.2, port 514, login netup, pass , cmd clear access-te
mplate 106 test2 any host 192.168.0.50
 Notice&#58; Jun 01 13&#58;02&#58;10 FWCntl&#58; Can't shutdown&#40;rfd&#41; while recv data from rsh soscket ... Error&#58;<Bad file d
escriptor>
 Notice&#58; Jun 01 13&#58;02&#58;10 FWCntl&#58; Can't shutdown&#40;rfd&#41; while recv data from rsh soscket ... Error&#58;<Bad file d
escriptor>
 Notice&#58; Jun 01 13&#58;02&#58;10 FWCntl&#58; Can't shutdown&#40;sock&#41; while recv data from rsh soscket ... Error&#58;<Bad file
descriptor>
 Notice&#58; Jun 01 13&#58;02&#58;10 FWCntl&#58; Can't shutdown&#40;sock&#41; while recv data from rsh soscket ... Error&#58;<Bad file
descriptor>

[Chrst]

собственно как проверить работу радиуса и передаются ли правила фаерволла с циски на биллинг

Это проверить не возможно. NAS не отправляет правила фаервола биллингу.

[ds]

собственно как проверить работу радиуса и передаются ли правила фаерволла с циски на биллинг

Судя по Error:<Bad file descriptor> rsh на циске вообще авторизует пользователя netup?

[phrozen]

сейчас настроил кошку таким образом

Код: Выделить всё

User Access Verification

Username: phrozen
Password:

Router#sh ru
Router#sh run
Router#sh running-config
Building configuration...

Current configuration : 3332 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot system disk0:c7400-js-mz.124-3.bin
boot-end-marker
!
no logging console
!
aaa new-model
aaa session-mib disconnect
!
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization network default group radius
aaa accounting update periodic 5
aaa accounting network default start-stop group radius
!
aaa session-id common
!
resource policy
!
syscon address 10.0.0.1 public
syscon shelf-id 0
ip subnet-zero
ip flow-cache timeout inactive 10
ip flow-cache timeout active 1
!
!
ip cef
ip name-server 217.9.147.42
ip name-server 217.9.148.4
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.1.254
!
ip dhcp pool LOCAL
   network 192.168.0.0 255.255.252.0
   dns-server 192.168.0.1
   default-router 192.168.0.1
!
!
!
virtual-template 1 pre-clone 500
!
!
!
!
!
!
!
!
!
!
!
username phrozen privilege 15 secret 5 $1$dLo1$Lu049LyWt9iafVsAqX4z2/
!
!
!
bba-group pppoe global
 virtual-template 1
 sessions max limit 8000
 ac name nas1
 sessions per-mac limit 1
 sessions per-vlan limit 500
 sessions auto cleanup
!
!
interface GigabitEthernet0/0
 ip address 10.0.0.2 255.255.255.0
 duplex full
 speed auto
 media-type rj45
!
interface GigabitEthernet0/1
 ip address 192.168.0.1 255.255.252.0
 duplex full
 speed auto
 media-type gbic
 negotiation auto
 pppoe enable group global
 no cdp enable
!
interface FastEthernet1/0
 ip address 172.29.1.2 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 duplex half
!
interface Virtual-Template1
 mtu 1492
 ip unnumbered GigabitEthernet0/0
 ip flow ingress
 ip flow egress
 ip nat inside
 ip virtual-reassembly
 ip route-cache policy
 ip route-cache flow
 autodetect encapsulation ppp
 peer default ip address pool PPPoE
 ppp max-bad-auth 3
 ppp authentication chap
 ppp timeout retry 3
 ppp timeout authentication 45
 ppp timeout idle 3600
!
ip local pool PPPoE 192.168.0.100 192.168.2.200
ip classless
ip route 0.0.0.0 0.0.0.0 172.29.1.1
ip flow-export source Virtual-Template1
ip flow-export version 5
ip flow-export destination 10.0.0.1 9996
!
no ip http server
!
ip nat inside source list 100 interface FastEthernet1/0 overload
ip dns server
!
!
ip access-list standard RW3
access-list 3 permit 10.0.0.1
access-list 3 deny   any log
access-list 100 permit ip 192.168.0.0 0.0.3.255 any
snmp-server community public RO RW3
snmp-server ifindex persist
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps aaa_server
snmp-server host 10.0.0.1 161
snmp-server host 10.0.0.1 2c
snmp-server host 10.0.0.1 aaa
snmp-server host 10.0.0.1 public  snmp
!
!
!
radius-server attribute 8 include-in-access-req
radius-server attribute nas-port format e UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
radius-server attribute 31 mac format unformatted
radius-server host 10.0.0.1 auth-port 1812 acct-port 1813
radius-server retransmit 5
radius-server timeout 30
radius-server deadtime 1
radius-server key 7 03175E08140A35
radius-server vsa send accounting
radius-server vsa send authentication
!
control-plane
!
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
line aux 0
line vty 0 4
 privilege level 15
!
!
end

Router#

весь вопрос заключается в том что нет подсчета траффика, подскажите решение