Биллинговая система Nodeny

ifconfig_em0="DHCP"
ifconfig_em0_alias0="inet XXX.XXX.192.22 netmask 255.255.255.248"

ifconfig_em1="inet 172.16.10.1 netmask 255.255.255.0"
ifconfig_em1_alias0="inet 172.16.1.1 netmask 255.255.255.0"
ifconfig_em1_alias3="inet 172.16.11.1 netmask 255.255.255.0"

ext_if = "ng0"

set limit states 128000
set optimization aggressive

binat on $ext_if from 172.16.10.2 to any -> XXX.XXX.192.22

nat pass on $ext_if from 172.16.10.0/24 to any -> ($ext_if)
nat pass on $ext_if from 172.16.1.0/24 to any -> ($ext_if)
nat pass on $ext_if from 172.16.11.0/24 to any -> ($ext_if)

em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether d4:ca:6d:6f:93:a8
        inet XXX.XXX.192.22 netmask 0xfffffff8 broadcast XXX.XXX.192.23
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether 90:e2:ba:52:6c:7d
        inet6 fe80::92e2:baff:fe52:6c7d%em1 prefixlen 64 scopeid 0x4
        inet 172.16.10.1 netmask 0xffffff00 broadcast 172.16.10.255
        inet 172.16.1.1 netmask 0xffffff00 broadcast 172.16.1.255
        inet 172.16.11.1 netmask 0xffffff00 broadcast 172.16.11.255
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
nfe0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=82008<VLAN_MTU,WOL_MAGIC,LINKSTATE>
        ether 00:22:15:b5:9a:46
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect (none)
        status: no carrier
plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
ipfw0: flags=8800<SIMPLEX,MULTICAST> metric 0 mtu 65536
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
        inet 127.0.0.1 netmask 0xff000000
        inet 172.16.254.1 netmask 0xffffffff
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1480
        inet XXX.XXX.193.103 --> XXX.XXX.2.191 netmask 0xffffffff
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>

root@base:/usr/home/sergey # pfctl -sn -v
No ALTQ support in kernel
ALTQ related functions disabled
nat pass on ng0 inet from 172.16.10.0/24 to any -> (ng0) round-robin
  [ Evaluations: 26685919  Packets: 25738881  Bytes: 18678146431  States: 20250 ]
  [ Inserted: uid 0 pid 70001 State Creations: 1013228]
nat pass on ng0 inet from 172.16.1.0/24 to any -> (ng0) round-robin
  [ Evaluations: 573854    Packets: 0         Bytes: 0           States: 0     ]
  [ Inserted: uid 0 pid 70001 State Creations: 0     ]
nat pass on ng0 inet from 172.16.11.0/24 to any -> (ng0) round-robin
  [ Evaluations: 573854    Packets: 12491130  Bytes: 8170210170  States: 9232  ]
  [ Inserted: uid 0 pid 70001 State Creations: 533458]
binat on ng0 inet from 172.16.10.2 to any -> XXX.XXX.192.22
  [ Evaluations: 96085763  Packets: 960449    Bytes: 884396979   States: 187   ]
  [ Inserted: uid 0 pid 70001 State Creations: 14243 ]

mpd5

radiusd -X

log-facility local7;

option domain-name-servers 172.16.254.1;

shared-network 123 {
interface em1;
subnet 172.16.10.0 netmask 255.255.255.0 {
    range 172.16.10.2 172.16.10.254;
    option routers 172.16.10.1;
    default-lease-time 2400;
    max-lease-time 1800;
    on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort ="";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
            set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }
    }

subnet 172.16.11.0 netmask 255.255.255.0 {
    range 172.16.11.2 172.16.11.254;
    option routers 172.16.11.1;
    default-lease-time 2400;
    max-lease-time 1800;
    on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort ="";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
            set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }
    }

subnet XXX.XXX.192.16 netmask 255.255.255.248 {
    range XXX.XXX.192.18 XXX.XXX.192.22;
    option routers XXX.XXX.192.17;
    default-lease-time 2400;
    max-lease-time 1800;
    on commit {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        set ClientMac = binary-to-ascii(16, 8, ":", substring(hardware, 1, 6));
        set SwitchMac = "";
        set SwitchPort ="";
        if exists agent.circuit-id
        {
            set SwitchMac = binary-to-ascii(16, 8, ":", option agent.remote-id);
            set SwitchPort = binary-to-ascii(10, 8, ":", suffix(option agent.circuit-id, 1));
        }
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "commit",
                ClientIP, ClientMac, SwitchMac, SwitchPort);
    }
    on expiry {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "expiry", ClientIP);
    }
    on release {
        set ClientIP  = binary-to-ascii(10, 8, ".", leased-address);
        execute("/usr/bin/perl", "/usr/local/nodeny/modules/dhcp/events.pl", "release", ClientIP);
    }
    }

}