vMX
Highlighted
vMX

vMX subscriver manager not working, but it should.

‎02-16-2019 04:44 AM

I've previuosly (about half a year) has configured subscriber manager via freeradius on vmx to test some ideas, and do not have any problems.

vMX version is JUNOS 18.1R1.9 Kernel 64-bit JNPR-11.0-20180308.0604c57_buil but I think this is configuration issue.

But now I'm stuck, I've copied part of my config from real hardware and it do not work with extrenal radius.

Maybe someone can help.

I've include dhcp log and configuration. Radius also working as you may see in dumps.

Attachments

6 REPLIES 6
Highlighted
vMX

Re: vMX subscriver manager not working, but it should.

‎02-16-2019 04:56 AM

Kindly provide below logs.

 

set system processes smg-service traceoptions file smgd size 100m
set system processes smg-service traceoptions flag all
set system processes smg-service traceoptions level all
set system processes dhcp-service traceoptions file jdhcp size 100m
set system processes dhcp-service traceoptions flag all
set system processes dhcp-service traceoptions level all
set system processes general-authentication-service traceoptions file authd size 100m
set system processes general-authentication-service traceoptions flag all

 

Did you tried make authentication none and tried? As you're sending service-activate from radius, need to check if it is causing any issue.

 

Please also update the show system license output.

 

Regards,

Rahul

Highlighted
vMX

Re: vMX subscriver manager not working, but it should.

‎02-16-2019 05:35 AM

Thank for reply:

root@vMX-1# run show system license
scale-subscriber 0 10 0 permanent
scale-l2tp 0 1000 0 permanent
scale-mobile-ip 0 1000 0 permanent

Licenses installed: none

 

You mean:

set access profile external-radius authentication-order none 

Two days ago I has configured vMX to server IP's to clients without radius (with the help of day one book). It was working, but with radius it don't.

 

Attachments

Highlighted
vMX

Re: vMX subscriver manager not working, but it should.

‎02-16-2019 05:50 AM

Yes correct. In case without radius authentication it is working, then please remove the return attributes from radius.

I can see you're sending framed-ip-address along with service-activate. Kindly delete it and check once.

 

Regards,

Rahul

Highlighted
vMX
Solution
Accepted by topic author schadel
‎02-16-2019 06:26 AM

Re: vMX subscriver manager not working, but it should.

‎02-16-2019 05:53 AM

Found the issue. Issue is triggered because of targeted-distribution. Kindly remove it from dynamic-profile and check once.

Feb 16 13:13:48 ==> BEGIN Dynamic Request( "dhcp-local-server-profile"
Feb 16 13:13:48 Info< session=2 action=ADD data_id=0xc141040>
Feb 16 13:13:48 bbe_process_dynamic_request: request to dprof plugin succeeded
Feb 16 13:13:48 dprof_process_request: Received cfg bits 0x00001402 0xf239c0ff
Feb 16 13:13:48 dprof_process_request: Received ADD request for profile: "dhcp-local-server-profile" from plugin: Central, Aux = 0
Feb 16 13:13:48 ERR: dprof_process_request: Add pre_processing failure for client request from plugin: Central, session_id=2, err=110, Invalid targeting config
Feb 16 13:13:48 ERR: dprof_request_handler: Request processing failed for plugin: Central, session_id=2, err=8
Feb 16 13:13:48 bbe_central_dprof_response_handler: response received, dprof response = 0x0xbdb8a18, data id = 0xc141040
Feb 16 13:13:48 bbe_dyn_prof_send_response: NACKing dynamic profile, dprof error: Failed to create IFL

 

Regards,

Rahul

Highlighted
vMX

Re: vMX subscriver manager not working, but it should.

‎02-16-2019 06:23 AM

I've changed my radius module (but as I notice previously it simply ignores services in case the are no exists in configuration), now it returns only IP address:

[root@Radius-2 ~]# radtest 6470.02b4.eb63 testing123 1.202.255.153 0 testing123
Sent Access-Request Id 26 from 0.0.0.0:38620 to 1.202.255.153:1812 length 84
        User-Name = "6470.02b4.eb63"
        User-Password = "testing123"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 0
        Message-Authenticator = 0x00
        Cleartext-Password = "testing123"
Received Access-Accept Id 26 from 1.202.255.153:1812 to 1.202.255.154:38620 length 26
        Framed-IP-Address = 19.205.49.2
[root@Radius-2 ~]# 

Now vMX only Init and release it:

IP address        Session Id  Hardware address   Expires     State      Interface
19.205.49.2       4           64:70:02:b4:eb:63  600         INIT       ge-0/0/0.3221225472 
---(refreshed at 2019-02-16 14:16:17 UTC)---
---(refreshed at 2019-02-16 14:16:30 UTC)---
IP address        Session Id  Hardware address   Expires     State      Interface
19.205.49.2       7           64:70:02:b4:eb:63  600         RELEASE    ge-0/0/0.3221225472
Highlighted
vMX

Re: vMX subscriver manager not working, but it should.

‎02-16-2019 06:29 AM

Thank you very much!!!