Junos OS

Expand all | Collapse all

Service Accounting Session Establishment Failed

Jump to Best Answer
  • 1.  Service Accounting Session Establishment Failed

    Posted 09-19-2020 22:17

    Hi

    After finding the root cause of "Not-Assigning" the dynamic profile to PPPoE Session as Service profile, I encountered another issue.

    The PPPoE session cannot be established. Here is my configuration:

    set firewall family inet filter CLASS01-IN term 1 from destination-prefix-list CLASS01-PREFIX
    set firewall family inet filter CLASS01-IN term 1 then service-accounting
    set firewall family inet filter CLASS01-IN term 1 then service-filter-hit
    set firewall family inet filter CLASS01-IN term 1 then accept
    set firewall family inet filter CLASS01-OUT term 1 from source-prefix-list CLASS01-PREFIX
    set firewall family inet filter CLASS01-OUT term 1 then service-accounting
    set firewall family inet filter CLASS01-OUT term 1 then service-filter-hit
    set firewall family inet filter CLASS01-OUT term 1 then accept

     

    set dynamic-profiles CLASS01 interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet filter input CLASS01-IN
    set dynamic-profiles CLASS01 interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet filter input precedence 10
    set dynamic-profiles CLASS01 interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet filter output CLASS01-OUT
    set dynamic-profiles CLASS01 interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet filter output precedence 10

    The problem is the PPPoE session is not established and I can see, the router sends Accounting-Stop with Code NAS-Request.

    Questions:

    1- What is the root cause?

    2- Is there any traceoption for debugging this issue?

    Thank you

    Alireza



  • 2.  RE: Service Accounting Session Establishment Failed
    Best Answer

    Posted 09-20-2020 03:59

    Hi

    I found the solution

    Following term must be added to each Filter,

    set firewall family inet filter <name> interface-specific