0

我在 ASR1001-X 上遇到 PPPoE 身份验证问题,当建立会话时,它会尝试创建完整的虚拟访问接口,而不仅仅是创建我想要的子接口:

> Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces.

我很确定这是因为我的半径服务器(freeradius)正在发回 Framed-Compression = VJ TCP/IP。我没有将其指定为回复属性,所以看起来它只是默认设置的。日志片段:

 *Apr 10 15:33:33.837: RADIUS:  authenticator 53 22 AB ED 7E A5 51 3B - 59 8B 21 0A 16 49 98 8A
*Apr 10 15:33:33.837: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
*Apr 10 15:33:33.837: RADIUS:  User-Name           [1]   7   "CN987"
*Apr 10 15:33:33.837: RADIUS:  CHAP-Password       [3]   19  *
*Apr 10 15:33:33.837: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]
*Apr 10 15:33:33.837: RADIUS:  NAS-Port            [5]   6   0                         
*Apr 10 15:33:33.837: RADIUS:  NAS-Port-Id         [87]  14  "0/0/2/1518.2"
*Apr 10 15:33:33.837: RADIUS:  Vendor, Cisco       [26]  41  
*Apr 10 15:33:33.837: RADIUS:   Cisco AVpair       [1]   35  "client-mac-address=000c.42bc.f8e2"
*Apr 10 15:33:33.837: RADIUS:  Service-Type        [6]   6   Framed                    [2]
*Apr 10 15:33:33.837: RADIUS:  NAS-IP-Address      [4]   6   An.IP.Add.Ess           
*Apr 10 15:33:33.837: RADIUS(000015EC): Sending a IPv4 Radius Packet
*Apr 10 15:33:33.837: RADIUS(000015EC): Started 5 sec timeout
*Apr 10 15:33:33.838: RADIUS: Received from id 1645/231 An.IP.Add.Ess:1812, Access-Accept, len 38
*Apr 10 15:33:33.838: RADIUS:  authenticator 37 64 DC EF BA E1 90 D8 - 48 58 C3 78 D9 CD 3E 2A
*Apr 10 15:33:33.838: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
*Apr 10 15:33:33.838: RADIUS:  Framed-Compression  [13]  6   VJ TCP/IP Header Compressi[1]
*Apr 10 15:33:33.838: RADIUS:  Service-Type        [6]   6   Framed                    [2]
*Apr 10 15:33:33.838: RADIUS(000015EC): Received from id 1645/231
*Apr 10 15:33:33.840: VT[Vi3]:Request took 1 msec, 1 msec processing time
*Apr 10 15:33:33.864: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb= 0x7F18F5B493B8, ifnum= 34

我一辈子都想不出如何阻止这种情况。任何想法将不胜感激。

4

1 回答 1

0

找到了解决方案。如果其他人有同样的问题,/etc/raddb/users 中的“DEFAULT”声明定义了默认的 Framed-Compression 与响应一起发送。评论出来修复它。

DEFAULT Framed-Protocol == PPP 
Framed-Protocol = PPP 
#   Framed-Compression = Van-Jacobson-TCP-IP
于 2018-04-11T11:32:45.880 回答