Huawei VRP (NE8000F1A) PPPoE RADIUS CoA

Support
1

Hi,
We have a NE8000F1A as BRAS, already configured to provide PPPoE access to our end users with Splynx via RADIUS.

I can assign users and rates without problem, but I cannot make CoA work. When I press DISCONNECT on the ONLINE USERS LIST nothing happens.

Here is my configuration:

radius-server group rd1
 radius-server shared-key-cipher xxx
 radius-server authentication 172.16.2.132 vpn-instance __LOCAL_OAM_VPN__ 1812 weight 0
 radius-server accounting 172.16.2.132 vpn-instance __LOCAL_OAM_VPN__ 1813 weight 0
 radius-server retransmit 5 timeout 10
 radius-server accounting-start-packet resend 3
 radius-server accounting-stop-packet resend 3
 radius-server accounting-interim-packet resend 5
 radius-server attribute translate
 radius-server user-name original
 radius-server user-name trust-server-request
 radius-server accounting-stop-packet send force
 radius-attribute include HW-Auth-Type
 radius-attribute include Reply-Message coa-nak
 radius-attribute include Event-Timestamp accounting-on accounting-off
 radius-attribute translate extend HW-Auth-Type vendor-specific 2011 109 access-request account
 radius-attribute hw-user-password simple coa-request
radius local-ip 172.16.2.9 __LOCAL_OAM_VPN__
undo radius local-ip all
radius-server coa-request hw-policy-name daa same-policy reply-ack
  authentication-mode local radius
 authentication-scheme radius
 accounting-scheme radius
  authentication-scheme radius
  accounting-scheme radius
  radius-server group rd1

The IP address of Splynx is 172.16.2.132. Checking open ports on the NE8000 I can see 3799 is open:

[~ne8k.hq.sslocal]display udp status
---------------------------------------------------------------------------------------------
    SockId        Cid LAddr             LPort    FAddr             FPort    FeNode
---------------------------------------------------------------------------------------------
         1 0x8053271F 0.0.0.0           67       0.0.0.0           0        257
        11 0x80D50441 0.0.0.0           161      0.0.0.0           0        0
        11 0x80D50441 172.16.2.9        161      172.16.2.129      0        0
        11 0x80D50441 172.16.2.9        161      172.16.2.130      0        0
       167 0x8062044F 0.0.0.0           38514    0.0.0.0           0        0
         1 0x8398042A 0.0.0.0           1812     0.0.0.0           0        0
         2 0x8398042A 0.0.0.0           1813     0.0.0.0           0        0
        11 0x8398042A 172.16.2.9        1645     0.0.0.0           0        0
        12 0x8398042A 172.16.2.9        1646     0.0.0.0           0        0
***     13 0x8398042A 172.16.2.9        3799     0.0.0.0           0        0 ***
         1 0x8026040C 0.0.0.0           57726    0.0.0.0           0        0
         1 0x8026040C 0.0.0.0           57726    172.16.2.130      0        0
        16 0x87FF2711 10.3.1.6          30179    172.16.2.49       30179    0
        16 0x87FF2711 170.233.116.1     30179    38.229.6.20       30179    0

Sorry for my bad english… Please tell me if I need to post more info and thanks!!!

2

For deep debugging you can log in to Splynx server

go to :
/var/www/splynx/logs/radius

check file: coa.log

get last record, something like this:

echo "User-Name = 000007, Framed-IP-Address = 10.0.20.55, NAS-IP-Address = 10.0.20.1" | /usr/bin/sudo /usr/bin/radclient 10.0.20.1:3799 disconnect "SECRET" > /dev/null &

then try to run this command without last: >/dev/null

echo "User-Name = 000007, Framed-IP-Address = 10.0.20.55, NAS-IP-Address = 10.0.20.1" | /usr/bin/sudo /usr/bin/radclient 10.0.20.1:3799 disconnect "SECRET"

and check the result.

You should see answer of router, and may be this will help.

3

Thanks,

I see no reply from the router. I’m investigating on it’s side now.
Do you have any advise for setting it up? I followed this example, with no success:

Thanks

4

I changed the radius shared secret from 16 (Huawei recommendation) to 4 and now it is working OK.
Maybe a bug with radclient or VRP?

Thanks!