RADIUS Attribute 198

[obauer]

Hi there,

i am trying to get the radius attribute 198 from dial-in router (AS5300, C2610) with ios 12.3.

With "debug radius" the following output apears:

*Mar 1 01:06:02.679: RADIUS: Acct-Session-Id [44] 10 "00000009"

*Mar 1 01:06:02.679: RADIUS: Framed-Protocol [7] 6 PPP

[1]

*Mar 1 01:06:02.679: RADIUS: Framed-IP-Address [8] 6 192.168.1.1

*Mar 1 01:06:02.679: RADIUS: Vendor, Cisco [26] 35

*Mar 1 01:06:02.679: RADIUS: Cisco AVpair [1] 29 "connect-progress=L

AN Ses Up"

*Mar 1 01:06:02.679: RADIUS: Acct-Session-Time [46] 6 23

*Mar 1 01:06:02.683: RADIUS: Acct-Input-Octets [42] 6 1377

*Mar 1 01:06:02.683: RADIUS: Acct-Output-Octets [43] 6 106

*Mar 1 01:06:02.683: RADIUS: Acct-Input-Packets [47] 6 14

*Mar 1 01:06:02.683: RADIUS: Acct-Output-Packets [48] 6 7

*Mar 1 01:06:02.683: RADIUS: Acct-Terminate-Cause[49] 6 user-request

[1]

*Mar 1 01:06:02.683: RADIUS: Vendor, Cisco [26] 39

*Mar 1 01:06:02.683: RADIUS: Cisco AVpair [1] 33 "disc-cause-ext=PPP

Receive Term"

*Mar 1 01:06:02.683: RADIUS: Authentic [45] 6 RADIUS

[1]

*Mar 1 01:06:02.687: RADIUS: User-Name [1] 6 "test"

*Mar 1 01:06:02.687: RADIUS: Acct-Status-Type [40] 6 Stop

[2]

*Mar 1 01:06:02.687: RADIUS: Vendor, Cisco [26] 16

*Mar 1 01:06:02.687: RADIUS: cisco-nas-port [2] 10 "BRI0/0:1"

*Mar 1 01:06:02.687: RADIUS: NAS-Port [5] 6 30001

*Mar 1 01:06:02.687: RADIUS: Vendor, Cisco [26] 26

*Mar 1 01:06:02.687: RADIUS: Cisco AVpair [1] 20 "interface=BRI0/0:1

"

*Mar 1 01:06:02.687: RADIUS: NAS-Port-Type [61] 6 ISDN

[2]

*Mar 1 01:06:02.691: RADIUS: Calling-Station-Id [31] 12 "3334277535"

*Mar 1 01:06:02.691: RADIUS: Called-Station-Id [30] 8 "289981"

*Mar 1 01:06:02.691: RADIUS: Service-Type [6] 6 Framed

[2]

*Mar 1 01:06:02.691: RADIUS: NAS-IP-Address [4] 6 192.168.255.104

*Mar 1 01:06:02.691: RADIUS: Acct-Delay-Time [41] 6 0

Where is the attribute 198?

Thanks,

Oliver

[mheusinger]

Hello,

would it be possible to post the relevant part of the config? Which Radius server is involved?

Regards, Martin

[obauer]

Hello Martin,

here is the information:

Cisco:

...

aaa new-model

!

!

aaa group server radius hamlet

server x.x.x.x auth-port 1812 acct-port 1813

!

aaa group server radius dialin-user

server x.x.x.x auth-port 1812 acct-port 1813

!

aaa authentication login default group hamlet local

aaa authentication sgbp default local

aaa authentication ppp default group dialin-user

aaa authorization exec default group hamlet

aaa accounting network default start-stop group dialin-user

aaa session-id common

...

radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 xxx

A1507

radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 xxx

radius-server vsa send accounting

radius-server vsa send authentication

We are using FreeRadius 0.8.1.

Regards,

Oliver

[mheusinger · Accepted solution]

Hello Oliver,

according to "Additional Vendor-Proprietary RADIUS Attributes" at

http://www.cisco.com/en/US/products/sw/iosswrel/ps1826/products_feature_guide09186a0080080efc.html

there should be additionally

radius-server host x.x.x.x non-standard

in the config to inform the router, that other attributes will be used as well.

See also http://www.cisco.com/en/US/products/sw/iosswrel/ps1828/products_configuration_guide_chapter09186a00800ca5f2.html#xtocid182645

for a commad syntax in IOS 12.0

Hope this helps!

Regards, Martin