vMX

Hi

I'm trying to use reauthenticate lease-renewal under the dhcp local server but the VSAs are ignored when reauthentication occurs?

root@LIx> Oct 14 12:36:40.180396 radius-access-request (reauth): User-Name added: 404e.363b.3bf3
Oct 14 12:36:40.180401 radius-access-request (reauth): User-Password added: ""
Oct 14 12:36:40.180421 radius-access-request (reauth): Service-Type added: 2
Oct 14 12:36:40.180432 radius-access-request (reauth): Chargeable-User-Identity added: 
Oct 14 12:36:40.180439 radius-access-request (reauth): Acct-Session-Id added: 339
Oct 14 12:36:40.180461 radius-access-request (reauth): DHCP-Options (Juniper-ERX-VSA) added: 35 01 01 3d 07 01 40 4e 36 3b 3b f3 39 02 05 dc 3c 0f 61 6e 64 72 6f 69 64 2d 64 68 63 70 2d 31 30 37 0a 01 03 06 0f 1a 1c 33 3a 3b 2b 
Oct 14 12:36:40.180471 radius-access-request (reauth): DHCP-MAC-Address (Juniper-ERX-VSA) added: 404e.363b.3bf3
Oct 14 12:36:40.180481 radius-access-request (reauth): Framed-IP-Address added: 203.0.113.121
Oct 14 12:36:40.180489 radius-access-request (reauth): Framed-IP-Netmask added: 255.255.255.0
Oct 14 12:36:40.180520 radius-access-request (reauth): NAS-Identifier added: LIx
Oct 14 12:36:40.180530 radius-access-request (reauth): NAS-Port added: 00 80 00 0c 
Oct 14 12:36:40.180536 radius-access-request (reauth): NAS-Port-Id added: ge-0/0/2.3221225666:12
Oct 14 12:36:40.180543 radius-access-request (reauth): NAS-Port-Type added: 15
Oct 14 12:36:40.180552 radius-access-request (reauth): PPPoE-Description (Juniper-ERX-VSA) added: pppoe 40:4e:36:3b:3b:f3
Oct 14 12:36:40.180563 radius-access-request (reauth): DHCP-First-Relay-IPv4-Address (Juniper-ERX-VSA) added: 203.0.113.1
Oct 14 12:36:40.180584 radius-access-request (reauth): DHCP-Header (Juniper-ERX-VSA) added: 01 01 06 00 78 89 b9 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 4e 36 3b 3b f3 00 00 00 00 00 00 00 00 00 00 
Oct 14 12:36:40.192427 radius-access-accept: Framed-IP-Address received: 203.0.113.121
Oct 14 12:36:40.192437 radius-access-accept: CoS-Parameter-Type (Juniper-ERX-VSA) ignored
Oct 14 12:36:40.192443 radius-access-accept: CoS-Parameter-Type (Juniper-ERX-VSA) ignored
Oct 14 12:36:40.192449 radius-access-accept: Ingress-Policy-Name (Juniper-ERX-VSA) ignored

Hi Michael, 

    Here is lists the RADIUS standard attributes and VSAs that can be processed during reauthentication when received in the RADIUS Access-Accept message, and describes how authd handle changes in attributes. Attribute processing is consistent with CoA request processing. The characteristics of the reauthenticating subscriber session change only if new values or new attributes are received in the Access-Accept message.

https://www.juniper.net/documentation/en_US/junos/topics/concept/dhcpv4-and-dhcpv6-radius-reauthentication-using-access-request-overview.html#RADIUSAttributesSupportedByReauthen-5ACE64EE

You probaly need to do the Activate-Service if you need to modify CoS and filters. 

The VSAs that are ignored are probably the unsupported ones for reauth.

Hope this helps !!

+++++++++++++++++++++++++++++++++++++++++++++

Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !

+++++++++++++++++++++++++++++++++++++++++++++

Regards

Arpit

My bad!

Much appreciated, Arpit 🙂