MAX TNT and logging 1

[elhnet2000]

My Max TNT is not logging to my radius server. I usually see logs in /var/log/radacct/*ip*/details. Any ideas?

 

[MaxPipeline]

This may be a no brainer question, but is accounting turned on? To check, read external-auth to get into that profile. Then list rad-acct-client. Make sure the server IP is there and that it is correct. Also make sure the acct-port is correct (should be 1646 or 1813) and the acct-key is not typed incorrectly.

 

[elhnet2000]

Accouting is setup correctly. I double checked. Nothing is going to my radius server.

 

[MaxPipeline]

Try running a radif debug to see if the TNT is in fact sending the accounting data. To run the debug first make sure your user account has allow-debug=yes. Then type "debug on" followed by "radif" (or "diag radif" depending on your TAOS version). Look for RADACCT packets as well as RADAUTH. If you see RADACCT packets being sent then the TNT is doing it's job. The next issue is to make sure nothing is preventing the RADIUS server from receiving the packet. Remember to double-check the server's settings as well.

Let me know what you get from the radif debug.

 

[elhnet2000]

Here is a clip of what I see. Thanks

IFMGR: _routMgrDestroyCallback, routeID 498, cause 0
IFF-10: makeIfActive: <kai>, <216.130.232.92/32>.
IFF-10: Interface has VRouter name = , ID = 0
IFMGR: no interface found for host kai
IFMGR: getInterfaceByIpAddr: addr 216.130.232.92, vRouterID 0.
IFF-10: no matching iff found: < kai>, <216.130.232.92
IFMGR-34: ifIsBackup called
IFMGR-34: interface is not a backup for any other
IFF-10: iff->if_tunnel set to 0
IFF-10: makeIfActive: invalid MpBundleID 0
IFMGR-34: makeRoutesActive for 216.130.232.92/32
IFMGR-34: no profile for kai, using Answer.
makeroutesactive: makeIfActiveDone
makeIfActiveDone
IFMGR-34: _ifTurnBackupOff called
IFMGR-34: adding route to 216.130.232.92/32
IFMGR-26: makeRoutesInactive
IFMGR-26: make interface inactive request (status 0x3).
IFMGR: free interface 26, prof 0
IFMGR: _routMgrDestroyCallback, routeID 1222, cause 0
IFF-204: makeIfActive: <athruz>, <216.130.232.93/32>.
IFF-204: Interface has VRouter name = , ID = 0
IFMGR: no interface found for host athruz
IFMGR: getInterfaceByIpAddr: addr 216.130.232.93, vRouterID 0.
IFF-204: no matching iff found: < athruz>, <216.130.232.9
IFMGR-26: ifIsBackup called
IFMGR-26: interface is not a backup for any other
IFF-204: iff->if_tunnel set to 0
IFMGR-26: makeRoutesActive for 216.130.232.93/32
IFMGR-26: no profile for athruz, using Answer.
makeroutesactive: makeIfActiveDone
makeIfActiveDone
IFMGR-26: _ifTurnBackupOff called
IFMGR-26: adding route to 216.130.232.93/32
IFMGR-45: makeRoutesInactive
IFMGR-45: make interface inactive request (status 0x3).
IFMGR: free interface 45, prof 0
IFMGR: _routMgrDestroyCallback, routeID 1591, cause 0

 

[elhnet2000]

Here is another snip of what I am getting

IFMGR-45: makeRoutesInactive
IFMGR-45: make interface inactive request (status 0x3).
IFMGR: free interface 45, prof 0
IFMGR: _routMgrDestroyCallback, routeID 1672, cause 0
RADACCT-863:createRadAcct: new session.
RADACCT:_getSessEntry: no sess, route=863
IFF-3: makeIfActive: <ferndog>, <216.130.232.97/32>.
IFF-3: Interface has VRouter name = , ID = 0
IFMGR: no interface found for host ferndog
IFMGR: getInterfaceByIpAddr: addr 216.130.232.97, vRouterID 0.
IFF-3: no matching iff found: < ferndog>, <216.130.232.97/32>
IFMGR-34: ifIsBackup called
IFMGR-34: interface is not a backup for any other
IFF-3: iff->if_tunnel set to 0
IFF-3: makeIfActive: invalid MpBundleID 0
IFMGR-34: makeRoutesActive for 216.130.232.97/32
IFMGR-34: no profile for ferndog, using Answer.
makeroutesactive: makeIfActiveDone
makeIfActiveDone
IFMGR-34: _ifTurnBackupOff called
IFMGR-34: adding route to 216.130.232.97/32
RADACCT-1503:createRadAcct: new session.
RADACCT:_getSessEntry: no sess, route=1503

 

[MaxPipeline]

Can you turn off the IFMGR debug? Isolate only the Radif debug only. To turn off ifmgr debug I believe you type &quot;ifmgr&quot; or &quot;diag ifmgr&quot; to toggle it off. Try to capture an authentication attempt as well.