vMX

Expand all | Collapse all

vMX subscriver manager not working, but it should.

Jump to Best Answer
  • 1.  vMX subscriver manager not working, but it should.

    Posted 02-16-2019 04:44

    I've previuosly (about half a year) has configured subscriber manager via freeradius on vmx to test some ideas, and do not have any problems.

    vMX version is JUNOS 18.1R1.9 Kernel 64-bit JNPR-11.0-20180308.0604c57_buil but I think this is configuration issue.

    But now I'm stuck, I've copied part of my config from real hardware and it do not work with extrenal radius.

    Maybe someone can help.

    I've include dhcp log and configuration. Radius also working as you may see in dumps.

    Attachment(s)

    txt
    jun_config.txt   5 K 1 version
    txt
    jun_wireshark.txt   15 K 1 version
    txt
    jun_dhcp_log.txt   12 K 1 version


  • 2.  RE: vMX subscriver manager not working, but it should.

     
    Posted 02-16-2019 04:56

    Kindly provide below logs.

     

    set system processes smg-service traceoptions file smgd size 100m
    set system processes smg-service traceoptions flag all
    set system processes smg-service traceoptions level all
    set system processes dhcp-service traceoptions file jdhcp size 100m
    set system processes dhcp-service traceoptions flag all
    set system processes dhcp-service traceoptions level all
    set system processes general-authentication-service traceoptions file authd size 100m
    set system processes general-authentication-service traceoptions flag all

     

    Did you tried make authentication none and tried? As you're sending service-activate from radius, need to check if it is causing any issue.

     

    Please also update the show system license output.

     

    Regards,

    Rahul



  • 3.  RE: vMX subscriver manager not working, but it should.

    Posted 02-16-2019 05:36

    Thank for reply:

    root@vMX-1# run show system license
    scale-subscriber 0 10 0 permanent
    scale-l2tp 0 1000 0 permanent
    scale-mobile-ip 0 1000 0 permanent

    Licenses installed: none

     

    You mean:

    set access profile external-radius authentication-order none 

    Two days ago I has configured vMX to server IP's to clients without radius (with the help of day one book). It was working, but with radius it don't.

     

    Attachment(s)

    txt
    jdhcp.txt   58 K 1 version
    txt
    smgd.txt   38 K 1 version


  • 4.  RE: vMX subscriver manager not working, but it should.

     
    Posted 02-16-2019 05:50

    Yes correct. In case without radius authentication it is working, then please remove the return attributes from radius.

    I can see you're sending framed-ip-address along with service-activate. Kindly delete it and check once.

     

    Regards,

    Rahul



  • 5.  RE: vMX subscriver manager not working, but it should.
    Best Answer

     
    Posted 02-16-2019 05:54

    Found the issue. Issue is triggered because of targeted-distribution. Kindly remove it from dynamic-profile and check once.

    Feb 16 13:13:48 ==> BEGIN Dynamic Request( "dhcp-local-server-profile"
    Feb 16 13:13:48 Info< session=2 action=ADD data_id=0xc141040>
    Feb 16 13:13:48 bbe_process_dynamic_request: request to dprof plugin succeeded
    Feb 16 13:13:48 dprof_process_request: Received cfg bits 0x00001402 0xf239c0ff
    Feb 16 13:13:48 dprof_process_request: Received ADD request for profile: "dhcp-local-server-profile" from plugin: Central, Aux = 0
    Feb 16 13:13:48 ERR: dprof_process_request: Add pre_processing failure for client request from plugin: Central, session_id=2, err=110, Invalid targeting config
    Feb 16 13:13:48 ERR: dprof_request_handler: Request processing failed for plugin: Central, session_id=2, err=8
    Feb 16 13:13:48 bbe_central_dprof_response_handler: response received, dprof response = 0x0xbdb8a18, data id = 0xc141040
    Feb 16 13:13:48 bbe_dyn_prof_send_response: NACKing dynamic profile, dprof error: Failed to create IFL

     

    Regards,

    Rahul



  • 6.  RE: vMX subscriver manager not working, but it should.

    Posted 02-16-2019 06:29

    Thank you very much!!!



  • 7.  RE: vMX subscriver manager not working, but it should.

    Posted 02-16-2019 06:24

    I've changed my radius module (but as I notice previously it simply ignores services in case the are no exists in configuration), now it returns only IP address:

    [root@Radius-2 ~]# radtest 6470.02b4.eb63 testing123 1.202.255.153 0 testing123
    Sent Access-Request Id 26 from 0.0.0.0:38620 to 1.202.255.153:1812 length 84
            User-Name = "6470.02b4.eb63"
            User-Password = "testing123"
            NAS-IP-Address = 127.0.0.1
            NAS-Port = 0
            Message-Authenticator = 0x00
            Cleartext-Password = "testing123"
    Received Access-Accept Id 26 from 1.202.255.153:1812 to 1.202.255.154:38620 length 26
            Framed-IP-Address = 19.205.49.2
    [root@Radius-2 ~]# 

    Now vMX only Init and release it:

    IP address        Session Id  Hardware address   Expires     State      Interface
    19.205.49.2       4           64:70:02:b4:eb:63  600         INIT       ge-0/0/0.3221225472 
    ---(refreshed at 2019-02-16 14:16:17 UTC)---
    ---(refreshed at 2019-02-16 14:16:30 UTC)---
    IP address        Session Id  Hardware address   Expires     State      Interface
    19.205.49.2       7           64:70:02:b4:eb:63  600         RELEASE    ge-0/0/0.3221225472