vMX

I've previuosly (about half a year) has configured subscriber manager via freeradius on vmx to test some ideas, and do not have any problems.

vMX version is JUNOS 18.1R1.9 Kernel 64-bit JNPR-11.0-20180308.0604c57_buil but I think this is configuration issue.

But now I'm stuck, I've copied part of my config from real hardware and it do not work with extrenal radius.

Maybe someone can help.

I've include dhcp log and configuration. Radius also working as you may see in dumps.

Attachment(s)

jun_config.txt   5 KB 1 version

jun_wireshark.txt   15 KB 1 version

jun_dhcp_log.txt   12 KB 1 version

Kindly provide below logs.

set system processes smg-service traceoptions file smgd size 100m
set system processes smg-service traceoptions flag all
set system processes smg-service traceoptions level all
set system processes dhcp-service traceoptions file jdhcp size 100m
set system processes dhcp-service traceoptions flag all
set system processes dhcp-service traceoptions level all
set system processes general-authentication-service traceoptions file authd size 100m
set system processes general-authentication-service traceoptions flag all

Did you tried make authentication none and tried? As you're sending service-activate from radius, need to check if it is causing any issue.

Please also update the show system license output.

Regards,

Rahul

Thank for reply:

root@vMX-1# run show system license
scale-subscriber 0 10 0 permanent
scale-l2tp 0 1000 0 permanent
scale-mobile-ip 0 1000 0 permanent

Licenses installed: none

You mean:

set access profile external-radius authentication-order none 

Two days ago I has configured vMX to server IP's to clients without radius (with the help of day one book). It was working, but with radius it don't.

Attachment(s)

jdhcp.txt   58 KB 1 version

smgd.txt   38 KB 1 version

Yes correct. In case without radius authentication it is working, then please remove the return attributes from radius.

I can see you're sending framed-ip-address along with service-activate. Kindly delete it and check once.

Regards,

Rahul

Found the issue. Issue is triggered because of targeted-distribution. Kindly remove it from dynamic-profile and check once.

Feb 16 13:13:48 ==> BEGIN Dynamic Request( "dhcp-local-server-profile"
Feb 16 13:13:48 Info< session=2 action=ADD data_id=0xc141040>
Feb 16 13:13:48 bbe_process_dynamic_request: request to dprof plugin succeeded
Feb 16 13:13:48 dprof_process_request: Received cfg bits 0x00001402 0xf239c0ff
Feb 16 13:13:48 dprof_process_request: Received ADD request for profile: "dhcp-local-server-profile" from plugin: Central, Aux = 0
Feb 16 13:13:48 ERR: dprof_process_request: Add pre_processing failure for client request from plugin: Central, session_id=2, err=110, Invalid targeting config
Feb 16 13:13:48 ERR: dprof_request_handler: Request processing failed for plugin: Central, session_id=2, err=8
Feb 16 13:13:48 bbe_central_dprof_response_handler: response received, dprof response = 0x0xbdb8a18, data id = 0xc141040
Feb 16 13:13:48 bbe_dyn_prof_send_response: NACKing dynamic profile, dprof error: Failed to create IFL

Regards,

Rahul

Thank you very much!!!

I've changed my radius module (but as I notice previously it simply ignores services in case the are no exists in configuration), now it returns only IP address:

[root@Radius-2 ~]# radtest 6470.02b4.eb63 testing123 1.202.255.153 0 testing123
Sent Access-Request Id 26 from 0.0.0.0:38620 to 1.202.255.153:1812 length 84
        User-Name = "6470.02b4.eb63"
        User-Password = "testing123"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 0
        Message-Authenticator = 0x00
        Cleartext-Password = "testing123"
Received Access-Accept Id 26 from 1.202.255.153:1812 to 1.202.255.154:38620 length 26
        Framed-IP-Address = 19.205.49.2
[root@Radius-2 ~]# 

Now vMX only Init and release it:

IP address        Session Id  Hardware address   Expires     State      Interface
19.205.49.2       4           64:70:02:b4:eb:63  600         INIT       ge-0/0/0.3221225472 
---(refreshed at 2019-02-16 14:16:17 UTC)---
---(refreshed at 2019-02-16 14:16:30 UTC)---
IP address        Session Id  Hardware address   Expires     State      Interface
19.205.49.2       7           64:70:02:b4:eb:63  600         RELEASE    ge-0/0/0.3221225472