Junos OS

last person joined: yesterday 

Ask questions and share experiences about Junos OS.
  • 1.  Send ERX-LI-Action CoA attributes

    Posted 09-27-2020 03:32

    Dear all

    MX960 18.4R3.3
    Could someone help me with setting ERX-LI-Action settings by CoA?

     

    I am trying to send the following CoA but get an error

    User-name = "dhcp.50d4.f796.5c8b"
    ERX-LI-Action = 1
    ERX-Med-Dev-Handle = 1111
    ERX-Med-Ip-Address = '192.168.25.1'
    ERX-Med-Port-Number = 12001

     

    I get the error

    Received response ID 141, code 45, length = 26
    Error-Cause = Invalid-Request

     

    Log from Juniper

     

    dyn_req_disconnect_cb attributes remote_addr:(192.168.25.1) remote_port:(50990), rtbl_idx:(0)
    authd_extract_identifier_avps received AVP type:1 val:dhcp.50d4.f796.5c8b len:19
    authd_extract_identifier_avps: User-Name=dhcp.50d4.f796.5c8b
    authd_extract_identifier_avps received AVP type:26 val: len:24
    authd_extract_identifier_avps received AVP type:26 val: len:24
    authd_extract_identifier_avps received AVP type:26 val: len:24
    authd_extract_identifier_avps received AVP type:26 val: len:24
    Looked up subscriber session-id:9170089 access-profile-name <p3>
    Parsing RADIUS message for session-id:9170089
    radius-coa-request: User-Name received: dhcp.50d4.f796.5c8b
    authd_radius_parse_message: Error parsing common avps - 15
    dyn_req_disconnect_cb Failed to parse CoA message, result=15, cause 5
    dyn_req_disconnect_cb:1081 Send disconnect response: session-id:9170089 cookie:(0) server_id:(XXXXXXX) port(50990)remote_addr:(XXXXXXXXX) remote_port:(50990) cause:(5) reason()
     authd_auth_aaa_msg_destruct auth_aaa_msg: 0x134c2ad0

     

    Thank you for any help!

     

     

     



  • 2.  RE: Send ERX-LI-Action CoA attributes

    Posted 09-27-2020 03:54

    Hi, ERX-Med-Dev-Handle should be in HEX. Try to set it as 

    ERX-Med-Dev-Handle = 0x1111



  • 3.  RE: Send ERX-LI-Action CoA attributes

    Posted 09-27-2020 05:52

    Thank you for your reply.

    But without success. The same error.

    Also, in the documentation, I see that ERX-Med-Dev-Handle is a string value



  • 4.  RE: Send ERX-LI-Action CoA attributes
    Best Answer

    Posted 09-27-2020 06:49

    Can you confirm these 

    1) is subscriber-secure-policy license installed ? 

    2) is "services radius-flow-tap" configured (at least vt interface and source address) ? 



  • 5.  RE: Send ERX-LI-Action CoA attributes

    Posted 09-27-2020 07:30

    Thank you that you pointed me to the license. I do not have it.

     

    But, maybe you can help me with another question which I asked before here

    https://forums.juniper.net/t5/Junos/Captive-Portal-configuration/td-p/481499

     

    Thanks,