Это PPPoE или IPoE?

freradius -X

PPPoE

E5-2697 v2

Ready to process requests
(0) Received Access-Request Id 1 from 10.10.1.1:56818 to 10.10.1.2:1812 length 150
(0)   User-Name = "c4:ad:34:c7:b0:2d"
(0)   NAS-Identifier = "nas02"
(0)   NAS-IP-Address = 10.10.1.1
(0)   NAS-Port = 9333
(0)   NAS-Port-Id = "ipoe0"
(0)   NAS-Port-Type = Ethernet
(0)   Calling-Station-Id = "c4:ad:34:c7:b0:2d"
(0)   Called-Station-Id = "enp2s0"
(0)   DHCP-Option82 = 0x010600010002010102061c877918e014
(0)   User-Password = "c4:ad:34:c7:b0:2d"
(0) # Executing section authorize from file /usr/local/freeradius/etc/raddb/sites-enabled/abills_default
(0)   authorize {
(0)     [preprocess] = ok
(0)     [mschap] = noop
(0) files: users: Matched entry DEFAULT at line 38
(0)     [files] = ok
(0) perl:   $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'User-Password'} = &request:User-Password -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> '10.10.1.1'
(0) perl:   $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '9333'
(0) perl:   $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'enp2s0'
(0) perl:   $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'NAS-Identifier'} = &request:NAS-Identifier -> 'nas02'
(0) perl:   $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet'
(0) perl:   $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Apr 22 2021 14:33:22 UTC'
(0) perl:   $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'ipoe0'
(0) perl:   $RAD_REQUEST{'DHCP-Option82'} = &request:DHCP-Option82 -> '0x010600010002010102061c877918e014'
(0) perl:   $RAD_CHECK{'Auth-Type'} = &control:Auth-Type -> 'Perl'
(0) perl:   $RAD_CONFIG{'Auth-Type'} = &control:Auth-Type -> 'Perl'
(0) perl: &request:NAS-Identifier = $RAD_REQUEST{'NAS-Identifier'} -> 'nas02'
(0) perl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '9333'
(0) perl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Apr 22 2021 14:33:22 UTC'
(0) perl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> '10.10.1.1'
(0) perl: &request:User-Password = $RAD_REQUEST{'User-Password'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'ipoe0'
(0) perl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet'
(0) perl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:DHCP-Option82 = $RAD_REQUEST{'DHCP-Option82'} -> '0x010600010002010102061c877918e014'
(0) perl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'enp2s0'
(0) perl: &control:Auth-Type = $RAD_CHECK{'Auth-Type'} -> 'Perl'
(0)     [perl] = ok
(0)   } # authorize = ok
(0) Found Auth-Type = Perl
(0) # Executing group from file /usr/local/freeradius/etc/raddb/sites-enabled/abills_default
(0)   Auth-Type Perl {
(0) perl:   $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'User-Password'} = &request:User-Password -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> '10.10.1.1'
(0) perl:   $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '9333'
(0) perl:   $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'enp2s0'
(0) perl:   $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'NAS-Identifier'} = &request:NAS-Identifier -> 'nas02'
(0) perl:   $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet'
(0) perl:   $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Apr 22 2021 14:33:22 UTC'
(0) perl:   $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'ipoe0'
(0) perl:   $RAD_REQUEST{'DHCP-Option82'} = &request:DHCP-Option82 -> '0x010600010002010102061c877918e014'
(0) perl:   $RAD_CHECK{'Auth-Type'} = &control:Auth-Type -> 'Perl'
(0) perl:   $RAD_CONFIG{'Auth-Type'} = &control:Auth-Type -> 'Perl'

DBD::mysql::st execute failed: Table 'abills.dhcphosts_hosts' doesn't exist at /usr/abills/libexec/../Abills/mysql/main.pm line 282.
(0) perl: &request:NAS-Identifier = $RAD_REQUEST{'NAS-Identifier'} -> 'nas02'
(0) perl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '9333'
(0) perl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Apr 22 2021 14:33:22 UTC'
(0) perl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> '10.10.1.1'
(0) perl: &request:User-Password = $RAD_REQUEST{'User-Password'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'ipoe0'
(0) perl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet'
(0) perl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:DHCP-Option82 = $RAD_REQUEST{'DHCP-Option82'} -> '0x010600010002010102061c877918e014'
(0) perl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'enp2s0'
(0) perl: &reply:Reply-Message = $RAD_REPLY{'Reply-Message'} -> 'IPoE Login Not Exist NAS_MAC: 02:06:1c:87:79:18 PORT: 1 VLAN: 2 MAC: c4:ad:34:c7:b0:2d'
(0) perl: &control:Auth-Type = $RAD_CHECK{'Auth-Type'} -> 'REJECT'
(0)     [perl] = reject
(0)   } # Auth-Type Perl = reject
(0) Failed to authenticate the user
(0) Using Post-Auth-Type Reject
(0) # Executing group from file /usr/local/freeradius/etc/raddb/sites-enabled/abills_default
(0)   Post-Auth-Type REJECT {
(0) perl:   $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'User-Password'} = &request:User-Password -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> '10.10.1.1'
(0) perl:   $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '9333'
(0) perl:   $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'enp2s0'
(0) perl:   $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_REQUEST{'NAS-Identifier'} = &request:NAS-Identifier -> 'nas02'
(0) perl:   $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet'
(0) perl:   $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Apr 22 2021 14:33:22 UTC'
(0) perl:   $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'ipoe0'
(0) perl:   $RAD_REQUEST{'DHCP-Option82'} = &request:DHCP-Option82 -> '0x010600010002010102061c877918e014'
(0) perl:   $RAD_REPLY{'Reply-Message'} = &reply:Reply-Message -> 'IPoE Login Not Exist NAS_MAC: 02:06:1c:87:79:18 PORT: 1 VLAN: 2 MAC: c4:ad:34:c7:b0:2d'
(0) perl:   $RAD_CHECK{'Auth-Type'} = &control:Auth-Type -> 'Reject'
(0) perl:   $RAD_CHECK{'Post-Auth-Type'} = &control:Post-Auth-Type -> 'Reject'
(0) perl:   $RAD_CONFIG{'Auth-Type'} = &control:Auth-Type -> 'Reject'
(0) perl:   $RAD_CONFIG{'Post-Auth-Type'} = &control:Post-Auth-Type -> 'Reject'
(0) perl: &request:NAS-Identifier = $RAD_REQUEST{'NAS-Identifier'} -> 'nas02'
(0) perl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '9333'
(0) perl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Apr 22 2021 14:33:22 UTC'
(0) perl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> '10.10.1.1'
(0) perl: &request:User-Password = $RAD_REQUEST{'User-Password'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'ipoe0'
(0) perl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet'
(0) perl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'c4:ad:34:c7:b0:2d'
(0) perl: &request:DHCP-Option82 = $RAD_REQUEST{'DHCP-Option82'} -> '0x010600010002010102061c877918e014'
(0) perl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'enp2s0'
(0) perl: &reply:Reply-Message = $RAD_REPLY{'Reply-Message'} -> 'IPoE Login Not Exist NAS_MAC: 02:06:1c:87:79:18 PORT: 1 VLAN: 2 MAC: c4:ad:34:c7:b0:2d'

(0) perl: &control:Post-Auth-Type = $RAD_CHECK{'Post-Auth-Type'} -> 'Reject'
(0) perl: &control:Auth-Type = $RAD_CHECK{'Auth-Type'} -> 'Reject'
(0)     [perl] = reject
(0)   } # Post-Auth-Type REJECT = reject
(0) Delaying response for 1.000000 seconds
Waking up in 0.1 seconds.
Waking up in 0.8 seconds.

Последние данные

Interfaces                     x RX bps       pps     %x TX bps       pps     %
>bond0                        x  12.16Gb    1.57M     x  12.21Gb

alpha вам нужно понимать эту строку 0x010600010002010102061c877918e014

которая в опци 82 прилетает

И на основе этого авторизовать клиента

Но лучше все же обратить к разработчикам биллинга.

спасибо за помощь

Это в сумме вход-выход, верно?

В сумме 24 будет

Без ната?

Как же без ната, 96% трафика за натом

Там я дпже больше скажу, новые состояния TCP логируются и отправляются по syslog

хорошо так, внушает

одна беда с этими софтовыми брасами - вот прилетит гигов 5 ддоса снаружи, и все... 😢