Discussion:
[rbak-nsp] clips local authentication
Evgenii Davidov
2017-12-17 08:07:09 UTC
Permalink
hello!
i'm using none-dhcp l3 clips
subscribers are configured locally
but there is one problem:
if subscriber tries to go to the internet before he is added to redback than he doesn't work after adding too
helps only removing service clips from the interface and adding again
nothing else helps (clear subscriber, clear clips counters, reauthorize username, policy-refresh username)
can you suggest me smth?
thanks a lot
--
Evgenii V Davidov
Michał Przywuski
2017-12-17 10:21:15 UTC
Permalink
Can you paste your confuguration ?? Maybe you have something wrong.

Wysłane z iPhone'a
Post by Evgenii Davidov
hello!
i'm using none-dhcp l3 clips
subscribers are configured locally
if subscriber tries to go to the internet before he is added to redback than he doesn't work after adding too
helps only removing service clips from the interface and adding again
nothing else helps (clear subscriber, clear clips counters, reauthorize username, policy-refresh username)
can you suggest me smth?
thanks a lot
--
Evgenii V Davidov
_______________________________________________
redback-nsp mailing list
https://puck.nether.net/mailman/listinfo/redback-nsp
Evgenii Davidov
2017-12-17 10:31:28 UTC
Permalink
Здравствуйте,

dzenkue, pan Przywuski, here is conf about clips, in general it works, but if subscriber tries to auth before he is in conf i get:

IPC_ENDPOINT = CLIPSd, MSG_TYPE = DB_RESPONSE, authen response = 2

and if after it i remove service clips from interface and add it again it starts to work

service-policy name clips1
allow clips ip range 172.27.0.1 172.27.254.254

interface i3 multibind
ip address 172.27.1.1/16
ip pool 172.27.0.0/16 name pool-clips-1

port ethernet 2/1
description found 2/1
no shutdown
medium-type copper
encapsulation dot1q
dot1q pvc 776
bind interface vlan776 local
service clips auto-detect context local service-policy clips1

subscriber default
flow apply ip profile FLOW_PROF both

subscriber name 172.27.56.4
password Redback
ip address 172.27.56.4
qos policy policing 64K-in
qos policy metering 64K-out
nat policy-name NAT-2
Post by Michał Przywuski
Can you paste your confuguration ?? Maybe you have something wrong.
Wys??ane z iPhone'a
Post by Evgenii Davidov
hello!
i'm using none-dhcp l3 clips
subscribers are configured locally
if subscriber tries to go to the internet before he is added to redback than he doesn't work after adding too
helps only removing service clips from the interface and adding again
nothing else helps (clear subscriber, clear clips counters, reauthorize username, policy-refresh username)
can you suggest me smth?
thanks a lot
--
Evgenii V Davidov
_______________________________________________
redback-nsp mailing list
https://puck.nether.net/mailman/listinfo/redback-nsp
--
Evgenii V Davidov
Evgenii Davidov
2017-12-18 06:10:05 UTC
Permalink
Здравствуйте,

yes, now i use olny one context: local, is it bad ?

i have about 500 active subscribers, 1000+ configured subscribers, licensed 8000

i use enhanced nat
Post by Evgenii Davidov
dot1q pvc 776
*bind interface vlan776 local * *?????*
service clips auto-detect context local service-policy clips1
port ethernet 2/4
description To-Arista
no shutdown
encapsulation dot1q
dot1q pvc 371
description TEST_AC2_OLD
bind interface DHCP_TEST AC2_OLD
qos policy policing 50Mbit-Upload
qos policy metering 10Mbit-Download
How many active subsciver you have ? What kind of nat you use ?
Post by Evgenii Davidov
dot1q pvc 776
bind interface vlan776 local
service clips auto-detect context local service-policy clips1
--
Micha?? Przywuski
Administrator sieci.
--
Evgenii V Davidov
Loading...