mpd5 рвутся тунели

[boomer666]

в режиме отладки я так понимаю ты не хочешь смотреть, что происходит с раидусом и есть ли таймауты соединения с БД.

Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 40116, id=72, length=347
Cleaning up request 2946 ID 72 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 55997, id=208, length=300
Cleaning up request 2950 ID 208 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 19942, id=77, length=383
Cleaning up request 2951 ID 77 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 11425, id=68, length=298
Cleaning up request 2952 ID 68 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 12777, id=68, length=298
Cleaning up request 2953 ID 68 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 15453, id=86, length=379
Cleaning up request 2954 ID 86 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 50798, id=197, length=374
Cleaning up request 2957 ID 197 with timestamp +6195
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.

вот это ток летает. что это?

[stix]

(Shared secret is incorrect.)

ты пароль не ввел так как нужно

[stix]

показывай дебаг режим radius, в момент передачи secret

и спрячь свои конфиги, а то все палится

Код:

C		Down	Initial	Initial	Initial	Initial	 
C-1	ng0	Up	Opened	Initial	Initial	Initial	vlan116-14	Opened	kill	pppoe	UP	00:0c:42:b1:b1:81	192.168.14.123	1	<=	000c42b1b181
C-2	ng1	Up	Opened	Initial	Initial	Initial	vlan121-19	Opened	novostroi2d	pppoe	UP	00:30:67:9f:5b:52	192.168.9.230		<=	0030679f5b52
C-3	ng2	Up	Opened	Initial	Initial	Initial	vlan114-21	Opened	pribrezh-33	pppoe	UP	00:08:54:66:c4:35	192.168.16.71		<=	00085466c435
C-4	ng3	Up	Opened	Initial	Initial	Initial	vlan117-13	Opened	znamenka158	pppoe	UP	00:13:8f:51:fb:82	192.168.14.52		<=	00138f51fb82
C-5	ng4	Up	Opened	Initial	Initial	Initial	vlan118-15	Opened	lenina-201	pppoe	UP	f8:d1:11:02:e9:97	192.168.17.19		<=	f8d11102e997
C-6	ng5	Up	Opened	Initial	Initial	Initial	vlan112-18	Opened	shevchenco-47	pppoe	UP	00:1f:d0:6d:e7:a6	192.168.15.86		<=	001fd06de7a6
C-7	ng6	Up	Opened	Initial	Initial	Initial	vlan117-16	Opened	kirov39	pppoe	UP	60:eb:69:4f:45:a5	192.168.14.32		<=	60eb694f45a5
C-8	ng7	Up	Opened	Initial	Initial	Initial	vlan122-23	Opened	intern60	pppoe	UP	b8:a3:86:ba:5a:35	192.168.16.208		<=	b8a386ba5a35
C-9	ng8	Up	Opened	Initial	Initial	Initial	vlan112-24	Opened	sverdlov36	pppoe	UP	00:1f:c6:d8:a2:52	192.168.9.81		<=	001fc6d8a252
C-10	ng9	Up	Opened	Initial	Initial	Initial	vlan114-17	Opened	sadova27r	pppoe	UP	00:11:5b:02:e6:dd	192.168.14.117		<=	00115b02e6dd
C-11	ng10	Up	Opened	Initial	Initial	Initial	vlan112-22	Opened	gagarinoffis	pppoe	UP	00:30:84:0f:c0:1d	195.222.125.135		<=	0030840fc01d
C-12	ng11	Up	Opened	Initial	Initial	Initial	vlan119-26	Opened	komarova38-3	pppoe	UP	74:ea:3a:82:f7:92	192.168.16.83		<=	74ea3a82f792
C-13	ng12	Up	Opened	Initial	Initial	Initial	vlan112-25	Opened	zarechna24	pppoe	UP	20:cf:30:61:33:22	192.168.16.179		<=	20cf30613322
C-14	ng13	Up	Opened	Initial	Initial	Initial	vlan119-28	Opened	komarov28_3	pppoe	UP	00:e0:00:00:10:74	192.168.17.6		<=	00e000001074
C-15	ng14	Up	Opened	Initial	Initial	Initial	vlan118-27	Opened	Lenin157_16r	pppoe	UP	84:c9:b2:a9:dc:15	192.168.14.66		<=	84c9b2a9dc15
C-16	ng15	Up	Opened	Initial	Initial	Initial	vlan117-20	Opened	podgorna23r	pppoe	UP	10:bf:48:dd:93:8b	192.168.16.220		<=	10bf48dd938b
C-17	ng16	Up	Opened	Initial	Initial	Initial	vlan114-30	Opened	sadova12r	pppoe	UP	00:18:f3:a8:75:6d	192.168.14.108		<=	0018f3a8756d
C-18	ng17	Up	Opened	Initial	Initial	Initial	vlan112-33	Opened	gagarin36r	pppoe	UP	70:5a:b6:f1:78:e0	192.168.9.84		<=	705ab6f178e0
C-19	ng18	Up	Opened	Initial	Initial	Initial	vlan112-29	Opened	gagarin27	pppoe	UP	00:e0:4c:ff:9e:77	192.168.9.166		<=	00e04cff9e77
C-20	ng19	Up	Opened	Initial	Initial	Initial	vlan113-31	Opened	komarova-38-17	pppoe	UP	00:25:22:e1:ed:4f	192.168.14.7		<=	002522e1ed4f
C-21	ng20	Up	Opened	Initial	Initial	Initial	vlan114-34	Opened	sad-19	pppoe	UP	50:46:5d:8d:05:93	192.168.15.100		<=	50465d8d0593
C-22	ng21	Up	Opened	Initial	Initial	Initial	vlan112-35	Opened	pochta13	pppoe	UP	00:1e:8c:ad:1f:ec	192.168.16.191		<=	001e8cad1fec
C-23	ng22	Up	Opened	Initial	Initial	Initial	vlan114-32	Opened	sverdlov93r	pppoe	UP	dc:0e:a1:7d:51:70	192.168.9.153		<=	dc0ea17d5170
C-24	ng23	Up	Opened	Initial	Initial	Initial	vlan113-36	Opened	lermont31	pppoe	UP	78:e7:d1:c6:58:06	192.168.17.37		<=	78e7d1c65806
C-25	ng24	Up	Opened	Initial	Initial	Initial	vlan113-37	Opened	lermont58	pppoe	UP	00:25:22:c4:f7:72	192.168.14.57		<=	002522c4f772
C-26	ng25	Up	Opened	Initial	Initial	Initial	vlan116-44	Opened	cheluskin10	pppoe	UP	b8:a3:86:0b:ba:fb	192.168.14.83		<=	b8a3860bbafb
C-27	ng26	Up	Opened	Initial	Initial	Initial	vlan118-39	Opened	len-167-10	pppoe	UP	00:1b:fc:33:de:a3	192.168.15.127		<=	001bfc33dea3
C-28	ng27	Up	Opened	Initial	Initial	Initial	vlan113-38	Opened	jd8	pppoe	UP	90:94:e4:31:ad:51	192.168.14.49		<=	9094e431ad51
C-29	ng28	Up	Opened	Initial	Initial	Initial	vlan121-40	Opened	lenin17r	pppoe	UP	00:13:8f:67:37:3d	192.168.9.152		<=	00138f67373d
C-30	ng29	Up	Opened	Initial	Initial	Initial	vlan114-41	Opened	sadova6	pppoe	UP	e8:11:32:13:9c:2c	192.168.9.66		<=	e81132139c2c
C-31	ng30	Up	Opened	Initial	Initial	Initial	vlan112-42	Opened	2proezd-2a	pppoe	UP	8c:89:a5:34:f8:53	192.168.15.35		<=	8c89a534f853
C-32	ng31	Up	Opened	Initial	Initial	Initial	vlan112-45	Opened	sverdlov48	pppoe	UP	94:0c:6d:85:91:64	192.168.9.79		<=	940c6d859164
C-33	ng32	Up	Opened	Initial	Initial	Initial	vlan112-43	Opened	novostroi92k	pppoe	UP	00:30:67:30:90:60	192.168.9.118		<=	003067309060
C-34	ng33	Up	Opened	Initial	Initial	Initial	vlan115-48	Opened	lenin78vr	pppoe	UP	00:e0:4d:6c:02:c2	192.168.14.91		<=	00e04d6c02c2
C-35	ng34	Up	Opened	Initial	Initial	Initial	vlan112-46	Opened	dzergin13c	pppoe	UP	00:30:67:a5:dc:e9	192.168.15.140		<=	003067a5dce9
C-36	ng35	Up	Opened	Initial	Initial	Initial	vlan115-49	Opened	chehova-2	pppoe	UP	c8:3a:35:dc:54:57	192.168.15.98		<=	c83a35dc5457
C-37	ng36	Up	Opened	Initial	Initial	Initial	vlan112-50	Opened	lenin30r	pppoe	UP	40:61:86:fb:6a:04	192.168.16.209		<=	406186fb6a04
C-38	ng37	Up	Opened	Initial	Initial	Initial	vlan113-47	Opened	Ler-7a	pppoe	UP	f0:de:f1:95:eb:05	192.168.15.53		<=	f0def195eb05
C-39	ng38	Up	Opened	Initial	Initial	Initial	vlan117-51	Opened	len-221-8	pppoe	UP	90:f6:52:bc:02:15	192.168.15.200		<=	90f652bc0215
C-40	ng39	Up	Opened	Initial	Initial	Initial	vlan116-53	Opened	cheluskin11a	pppoe	UP	f4:6d:04:a8:f2:6a	192.168.9.225		<=	f46d04a8f26a
C-41	ng40	Up	Opened	Initial	Initial	Initial	vlan116-52	Opened	rechna-1	pppoe	UP	00:25:22:85:13:02	192.168.15.128		<=	002522851302
C-42	ng41	Up	Opened	Initial	Initial	Initial	vlan117-54	Opened	nabereg7	pppoe	UP	fc:75:16:41:ff:d1	192.168.16.24		<=	fc751641ffd1
C-43	ng42	Up	Opened	Initial	Initial	Initial	vlan120-55	Opened	komarova-9-2	pppoe	UP	00:e0:52:81:02:43	192.168.16.114		<=	00e052810243
C-44	ng43	Up	Opened	Initial	Initial	Initial	vlan117-56	Opened	len-221-14	pppoe	UP	00:24:8c:bb:50:2f	192.168.15.96		<=	00248cbb502f
C-45	ng44	Up	Opened	Initial	Initial	Initial	vlan118-57	Opened	len-169-14	pppoe	UP	4c:72:b9:19:f6:21	192.168.15.97		<=	4c72b919f621
C-46	ng45	Up	Opened	Initial	Initial	Initial	vlan119-58	Opened	komarov44	pppoe	UP	14:d6:4d:77:76:f9	192.168.16.45		<=	14d64d7776f9
C-47	ng46	Up	Opened	Initial	Initial	Initial	vlan113-59	Opened	ogorod-18a	pppoe	UP	00:19:21:f5:59:60	192.168.15.112		<=	001921f55960
C-48	ng47	Up	Opened	Initial	Initial	Initial	vlan117-61	Opened	kirov18	pppoe	UP	10:78:d2:87:ca:f6	192.168.15.50		<=	1078d287caf6
C-49	ng48	Up	Opened	Initial	Initial	Initial	vlan117-60	Opened	znamenka7	pppoe	UP	b0:48:7a:84:41:47	192.168.16.188		<=	b0487a844147
C-50	ng49	Up	Opened	Initial	Initial	Initial	vlan120-62	Opened	komarova-9-1	pppoe	UP	00:07:26:3e:5e:19	192.168.17.18		<=	0007263e5e19

[boomer666]

может не то.

Код:

 Tunnel-Client-Endpoint:0 = "b8:a3:86:0b:ba:fb"
        Framed-IP-Address = 192.168.14.83
        Framed-IP-Netmask = 255.255.255.255
        User-Name = "cheluskin10"
        Acct-Multi-Session-Id = "9384562-C-26"
        Vendor-12341-Attr-13 = 0x432d3236
        Vendor-12341-Attr-14 = 0x6e673235
        Vendor-12341-Attr-15 = 0x00000038
        Acct-Link-Count = 1
        Acct-Authentic = RADIUS
        Acct-Status-Type = Interim-Update
        Acct-Session-Time = 1487
        Acct-Input-Octets = 110323421
        Acct-Input-Packets = 555890
        Acct-Input-Gigawords = 0
        Acct-Output-Octets = 1104019995
        Acct-Output-Packets = 837042
        Acct-Output-Gigawords = 0
# Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
+- entering group preacct {...}
++[preprocess] returns ok
# Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
+- entering group accounting {...}
[sql]   expand: %{User-Name} -> cheluskin10
[sql] sql_set_user escaped user --> 'cheluskin10'
[sql]   expand: call radupdate('%{SQL-User-Name}') -> call radupdate('cheluskin10')
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): Released sql socket id: 4
++[sql] returns ok
Sending Accounting-Response of id 108 to 127.0.0.1 port 24880
Finished request 0.
Cleaning up request 0 ID 108 with timestamp +0
Going to the next request
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 41596, id=244, length=365
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 44997, id=56, length=401
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 53850, id=164, length=376
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.8 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 59736, id=127, length=378
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.4 seconds.
Cleaning up request 1 ID 244 with timestamp +0
Cleaning up request 2 ID 56 with timestamp +0
Waking up in 0.1 seconds.
Cleaning up request 3 ID 164 with timestamp +1
Waking up in 0.4 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 44561, id=172, length=366
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.2 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 30970, id=68, length=345
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.1 seconds.
Cleaning up request 4 ID 127 with timestamp +1
Waking up in 0.7 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 14994, id=34, length=365
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.7 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 39809, id=171, length=386
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.2 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 32275, id=243, length=381
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.1 seconds.
Cleaning up request 5 ID 172 with timestamp +2
Cleaning up request 6 ID 68 with timestamp +2
Waking up in 0.1 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 56716, id=163, length=380
        NAS-Identifier = "gwww.tel"
        NAS-IP-Address = 127.0.0.1
        Acct-Session-Id = "9383529-vlan114-21"
        NAS-Port = 21
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "00085466c435"
        NAS-Port-Id = "vlan114"
        Vendor-12341-Attr-12 = 0x766c616e3131342d3231
        Vendor-12341-Attr-19 = 0x4d5352415356352e3230204d535241532d302d57495a4152442099761a0fec9349419cb58d8fee859e66
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Client-Endpoint:0 = "00:08:54:66:c4:35"
        Framed-IP-Address = 192.168.16.71
        Framed-IP-Netmask = 255.255.255.255
        User-Name = "pribrezh-33"
        Acct-Multi-Session-Id = "9383529-C-3"
        Vendor-12341-Attr-13 = 0x432d33
        Vendor-12341-Attr-14 = 0x6e6732
        Vendor-12341-Attr-15 = 0x00000021
        Vendor-12341-Attr-19 = 0x4d5352415356352e3230204d535241532d302d57495a4152442099761a0fec9349419cb58d8fee859e66
        Acct-Link-Count = 1
        Acct-Authentic = RADIUS
        Acct-Status-Type = Interim-Update
        Acct-Session-Time = 2523
        Acct-Input-Octets = 2908739
        Acct-Input-Packets = 33011
        Acct-Input-Gigawords = 0
        Acct-Output-Octets = 67862593
        Acct-Output-Packets = 52634
        Acct-Output-Gigawords = 0
# Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
+- entering group preacct {...}
++[preprocess] returns ok
# Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
+- entering group accounting {...}
[sql]   expand: %{User-Name} -> pribrezh-33
[sql] sql_set_user escaped user --> 'pribrezh-33'
[sql]   expand: call radupdate('%{SQL-User-Name}') -> call radupdate('pribrezh-33')
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql (sql): Released sql socket id: 3
++[sql] returns ok
Sending Accounting-Response of id 163 to 127.0.0.1 port 56716
Finished request 10.
Cleaning up request 10 ID 163 with timestamp +3
Going to the next request
Waking up in 0.1 seconds.
Cleaning up request 7 ID 34 with timestamp +2
Waking up in 0.4 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 60476, id=2, length=388
        NAS-Identifier = "gwww.tel"
        NAS-IP-Address = 127.0.0.1
        Acct-Session-Id = "9385600-vlan117-56"
        NAS-Port = 56
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "00248cbb502f"
        NAS-Port-Id = "vlan117"
        Vendor-12341-Attr-12 = 0x766c616e3131372d3536
        Vendor-12341-Attr-19 = 0x4d5352415356352e3230204d535241532d302d555345522d50505043205fd018439164d045afb5e3db27e6247c
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Client-Endpoint:0 = "00:24:8c:bb:50:2f"
        Framed-IP-Address = 192.168.15.96
        Framed-IP-Netmask = 255.255.255.255
        User-Name = "len-221-14"
        Acct-Multi-Session-Id = "9385600-C-44"
        Vendor-12341-Attr-13 = 0x432d3434
        Vendor-12341-Attr-14 = 0x6e673433
        Vendor-12341-Attr-15 = 0x0000004a
        Vendor-12341-Attr-19 = 0x4d5352415356352e3230204d535241532d302d555345522d50505043205fd018439164d045afb5e3db27e6247c
        Acct-Link-Count = 1
        Acct-Authentic = RADIUS
        Acct-Status-Type = Interim-Update
        Acct-Session-Time = 452
        Acct-Input-Octets = 3774011
        Acct-Input-Packets = 40517
        Acct-Input-Gigawords = 0
        Acct-Output-Octets = 9005052
        Acct-Output-Packets = 38682
        Acct-Output-Gigawords = 0
# Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
+- entering group preacct {...}
++[preprocess] returns ok
# Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
+- entering group accounting {...}
[sql]   expand: %{User-Name} -> len-221-14
[sql] sql_set_user escaped user --> 'len-221-14'
[sql]   expand: call radupdate('%{SQL-User-Name}') -> call radupdate('len-221-14')
rlm_sql (sql): Reserving sql socket id: 2
rlm_sql (sql): Released sql socket id: 2
++[sql] returns ok
Sending Accounting-Response of id 2 to 127.0.0.1 port 60476
Finished request 11.
Cleaning up request 11 ID 2 with timestamp +3
Going to the next request
rad_recv: Accounting-Request packet from host 127.0.0.1 port 41596, id=244, length=365
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Cleaning up request 8 ID 171 with timestamp +2
Waking up in 0.1 seconds.
Cleaning up request 9 ID 243 with timestamp +3
Waking up in 0.8 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 53850, id=164, length=376
Received Accounting-Request packet from client 127.0.0.1 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
Going to the next request
Waking up in 0.8 seconds.
rad_recv: Accounting-Request packet from host 127.0.0.1 port 16325, id=192, length=325
        NAS-Identifier = "gwww.tel"
        NAS-IP-Address = 127.0.0.1
        Acct-Session-Id = "9385331-vlan117-51"
        NAS-Port = 51
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Calling-Station-Id = "90f652bc0215"
        NAS-Port-Id = "vlan117"
        Vendor-12341-Attr-12 = 0x766c616e3131372d3531
        Vendor-12341-Attr-19 = 0x4d535241532d302d626330323133
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Client-Endpoint:0 = "90:f6:52:bc:02:15"
        Framed-IP-Address = 192.168.15.200
        Framed-IP-Netmask = 255.255.255.255
        User-Name = "len-221-8"
        Acct-Multi-Session-Id = "9385331-C-39"
        Vendor-12341-Attr-13 = 0x432d3339
        Vendor-12341-Attr-14 = 0x6e673338
        Vendor-12341-Attr-15 = 0x00000045
        Vendor-12341-Attr-19 = 0x4d535241532d302d626330323133
        Acct-Link-Count = 1
        Acct-Authentic = RADIUS
        Acct-Status-Type = Interim-Update
        Acct-Session-Time = 722
        Acct-Input-Octets = 1645481
        Acct-Input-Packets = 15663
        Acct-Input-Gigawords = 0
        Acct-Output-Octets = 23865813
        Acct-Output-Packets = 20315
        Acct-Output-Gigawords = 0
# Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
+- entering group preacct {...}
++[preprocess] returns ok
# Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
+- entering group accounting {...}
[sql]   expand: %{User-Name} -> len-221-8
[sql] sql_set_user escaped user --> 'len-221-8'
[sql]   expand: call radupdate('%{SQL-User-Name}') -> call radupdate('len-221-8')
rlm_sql (sql): Reserving sql socket id: 1
rlm_sql (sql): Released sql socket id: 1
++[sql] returns ok
Sending Accounting-Response of id 192 to 127.0.0.1 port 16325
Finished request 14.
Cleaning up request 14 ID 192 with timestamp +4
Going to the next request
Waking up in 0.8 seconds.

[stix]

нет, не то.

я устал......

[boomer666]

Оказывается туннель не рвется, пропадает интернет у клиента
, ключик тухнит и показывает что клиента нет.
Через 2-3 минуты загорается ключик и интернет у клиента начинает бегать).

это только на сателлите с mpd5, а если авторизуется на микротик то все норм.
подскажите в чем может быть проблема?

[Demeo]

Проверь правильность процедуры radupdate или попробуй увеличить время опроса

[boomer666]

Проверь правильность процедуры radupdate или попробуй увеличить время опроса

процедура

Код:

--------------------------------------------------------------------------------------------------------+
| Procedure | sql_mode | Create Procedure                                                                                                                                                                                               |
+-----------+----------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| radupdate |          | CREATE DEFINER=`root`@`localhost` PROCEDURE `radupdate`(IN login VARCHAR(64))
BEGIN
  INSERT into dblogin (mid,act,time) VALUES
    ((SELECT id FROM users WHERE name=login LIMIT 1),47,unix_timestamp());
END |
+-----------+----------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)

на микротиках 95% абонентов и все норм
5%абонентов на мпд5 эта проблема

[goletsa]

Я бы предложил сделать проверку MySQL DB.
Возможен косяк с таблицей dblogin.

[stix]

микротик через радиус нормально авторизуется и работает, так что с бд все ок получается
почему-то mpd не делает radupdate

чтобы подтвердить или исключить проблему с mpd, достаточно подключиться к ppp серверу и пинговать туннельный локальный Ip.
и параллельно пинговать какой-то внешний интерфейс, дабы проверить форвардинг

[0xbad0c0d3]

Отруби в конфиге радиуса все аккаунтинг запросы, 100% они тебе на йух не нужны...

[stix]

насколько помню, все было отключено

[boomer666]

микротик через радиус нормально авторизуется и работает, так что с бд все ок получается
почему-то mpd не делает radupdate

чтобы подтвердить или исключить проблему с mpd, достаточно подключиться к ppp серверу и пинговать туннельный локальный Ip.
и параллельно пинговать какой-то внешний интерфейс, дабы проверить форвардинг

я так и делал пинг-овал инет и локальный ip.
 инет пропал, а локальный все хорошо
даже правила firewall  пропали.

[stix]

надо попробовать вручную запустить процедуру апдейта

[boomer666]

откуда запустить?
с мускула?