Problem with Acct-Session-Id malformed field

rganacim · Created Jul 29, 2019 23:12:29

Posted by chenhui at 2019-07-29 04:08 @rganacim Hi,I checked with the R&D guys, the first two digits of the acct-session-id is in hexade ...

Hi@chenhui , thanks for the help.

I'm testing this, but I think its generating wrong numbers.

For example:

<PPPoe1>display access-user username ******* verbose
-------------------------------------------------------------------
Basic:
User access index : 13760
State : Used
User name : ********

Then I got from radius:

Radius Acct-Session-Id: AAADj6

Trying to convert:

Converting AAADj6 in DECIMAL: 14586
Converting 13760 to BASE64: DXA
Converting AAADXA to DECIMAL: 13760

It appears to be a incorrect number generation.

Do you know if there something else am I missing?

chenhui · Created Jul 30, 2019 02:12:17

Posted by rganacim at 2019-07-29 23:12 Hi@chenhui , thanks for the help.I'm testing this, but I think its generating wrong numbers.For ex ...

Hi,
you got acct-session-id: AAADj6 on the RADIUS server?
I just searched the RFC 2866 which described the RADIUS Accounting, it said the The Acct-Session-Id SHOULD contain UTF-8 encoded 10646 characters, could it be caused by the different encoding?
Or, you can try to capture packets on the RADIUS server and check the Accounting-Request or Access-request packet sent by the router, to check if the attribute Acct-session-id in the packet equal to AAADj6 or AAADXA.

rganacim · Created Jul 30, 2019 13:17:58

Hi @chenhui ,

We got the access-request from radius:

rad_recv: Access-Request packet from host 10.88.88.1 port 1812, id=115, length=323
User-Name = "*****@*********"
CHAP-Password = *********
CHAP-Challenge = *********
NAS-Port = 3150824
NAS-IP-Address = 10.88.88.1
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "fc:a6:cd:59:af:a3"
NAS-Identifier = "PPPOE-NE20"
NAS-Port-Type = Ethernet
NAS-Port-Id = "slot=0;subslot=3;port=1;vlanid=1000;"
Acct-Session-Id = "d0AAAEKM"
Connect-Info = "1000000000"
Huawei-Startup-Stamp = 1560600261
Huawei-IPHost-Addr = "255.255.255.255 fc:a6:cd:59:af:a3"
Huawei-Connect-ID = 16008
Huawei-Version = "Huawei NE20E"
Huawei-Product-ID = "NE20E"
Huawei-Domain-Name = "*********"
Huawei-Attr-153 = 0x66633a61363a63643a35393a61663a6133

And the display access-user:

<PPPoe1>dis access-user username equipeg verbose
-------------------------------------------------------------------
Basic:
User access index : 16008
State : Used
User name : *********@*********
Domain name : *********
User backup state : No
RUI user state : -

But we can't get the same number converting to decimal/base64:

Converting AAAEKM to DECIMAL: 17036
Converting 16008 to BASE64: D6I

Getting info over SNMP:

# snmpwalk -c '*****' -v 2c 10.88.88.1 1.3.6.1.4.1.2011.5.2.1.15.1.3.16008
iso.3.6.1.4.1.2011.5.2.1.15.1.3.16008 = STRING: "correct@username"

# snmpwalk -c '*****' -v 2c 10.88.88.1 1.3.6.1.4.1.2011.5.2.1.15.1.3.17036
iso.3.6.1.4.1.2011.5.2.1.15.1.3.17036 = No Such Instance currently exists at this OID

Could you help us to solve this?

chenhui · Created Aug 1, 2019 09:18:24

Posted by rganacim at 2019-07-30 13:17 Hi @chenhui ,We got the access-request from radius:rad_recv: Access-Request packet from host 10.88. ...

Hi, I checked with the R&D guys, the acct-session-id is not expressed in the Base-64 format, it's modified to Base-62, A to Z equals 0 to 25, a to z equals 26 to 51, 0 to 9 equals 52 to 61.
So the AAAEKM = 0*62^5 + 0*62^4 + 0*62^3 + 4*62^2 + 10*62 + 12 = 16008.

Problem with Acct-Session-Id malformed field

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

Problem with Acct-Session-Id malformed field

Third Party’s Trade Secret

My Followers