Anda di halaman 1dari 10

LAB-router-10K#show sss session username rediruser-1@tedata.net.eg Unique Session ID: 91 Identifier: rediruser-1@tedata.net.

eg SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 03:00:13, Last Changed: 03:00:13 Interface: Virtual-Access5 Policy information: Authentication status: authen Active services associated with session: name "MONTHLY_2048" name "OPENGARDEN_SERVICE", applied before account logon name "PBHK_SERVICE", applied before account logon Rules, actions and conditions executed: subscriber rule-map tedata-parent-1 condition always event session-start 1 collect identifier unauthenticated-username 2 service-policy type service name PBHK_SERVICE 3 service-policy type service name OPENGARDEN_SERVICE subscriber rule-map tedata-parent-1 condition always event service-start 2 service-policy type service unapply name QUOTAREDIRECT_SERVICE 3 service-policy type service identifier service-name Session inbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_IN, Packets = 5931, Bytes = 389402 Traffic class session ID: 93 ACL Name: INTERNET_ACL_IN, Packets = 3667099, Bytes = 179918570 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Feature: Portbundle Hostkey Portbundle IP = 163.121.162.20 Bundle Number = 93

Session outbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_OUT, Packets = 3382, Bytes = 338310 Traffic class session ID: 93 ACL Name: INTERNET_ACL_OUT, Packets = 5388367, Bytes = 1777620058 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 0.0.0.0 (F/F) Address Pool: TEDATA (F) Unnumbered Intf: [None] Feature: Session Timeout Timeout value is 432000 seconds Time remaining is 4d20h Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 03:00:14 AAA Service ID = 2936012811 Service: OPENGARDEN_SERVICE, Active Time = 03:00:14 Service: PBHK_SERVICE, Active Time = 03:00:14 Interface: Virtual-Template500, Active Time = 03:00:14

LAB-router-10K#show sss session username rediruser-1@tedata.net.eg Unique Session ID: 91 Identifier: rediruser-1@tedata.net.eg SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 03:00:16, Last Changed: 03:00:16 Interface: Virtual-Access5 Policy information: Authentication status: authen Active services associated with session: name "MONTHLY_2048" name "OPENGARDEN_SERVICE", applied before account logon name "PBHK_SERVICE", applied before account logon Rules, actions and conditions executed: subscriber rule-map tedata-parent-1 condition always event session-start 1 collect identifier unauthenticated-username 2 service-policy type service name PBHK_SERVICE 3 service-policy type service name OPENGARDEN_SERVICE subscriber rule-map tedata-parent-1 condition always event service-start 2 service-policy type service unapply name QUOTAREDIRECT_SERVICE 3 service-policy type service identifier service-name Session inbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_IN, Packets = 5931, Bytes = 389402 Traffic class session ID: 93 ACL Name: INTERNET_ACL_IN, Packets = 3667733, Bytes = 179949553 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Feature: Portbundle Hostkey Portbundle IP = 163.121.162.20 Bundle Number = 93

Session outbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_OUT, Packets = 3382, Bytes = 338310 Traffic class session ID: 93 ACL Name: INTERNET_ACL_OUT, Packets = 5389532, Bytes = 1778798063 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 0.0.0.0 (F/F) Address Pool: TEDATA (F) Unnumbered Intf: [None] Feature: Session Timeout Timeout value is 432000 seconds Time remaining is 4d20h Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 03:00:16 AAA Service ID = 2936012811 Service: OPENGARDEN_SERVICE, Active Time = 03:00:16 Service: PBHK_SERVICE, Active Time = 03:00:16

Interface: Virtual-Template500, Active Time = 03:00:16 LAB-router-10K#show sss session username rediruser-1@tedata.net.eg Unique Session ID: 91 Identifier: rediruser-1@tedata.net.eg SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 03:04:46, Last Changed: 03:04:46 Interface: Virtual-Access5 Policy information: Authentication status: authen Active services associated with session: name "MONTHLY_2048" name "OPENGARDEN_SERVICE", applied before account logon name "PBHK_SERVICE", applied before account logon Rules, actions and conditions executed: subscriber rule-map tedata-parent-1 condition always event session-start 1 collect identifier unauthenticated-username 2 service-policy type service name PBHK_SERVICE 3 service-policy type service name OPENGARDEN_SERVICE subscriber rule-map tedata-parent-1 condition always event service-start 2 service-policy type service unapply name QUOTAREDIRECT_SERVICE 3 service-policy type service identifier service-name Session inbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_IN, Packets = 6186, Bytes = 406924 Traffic class session ID: 93 ACL Name: INTERNET_ACL_IN, Packets = 3786628, Bytes = 187956294 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Feature: Portbundle Hostkey Portbundle IP = 163.121.162.20 Bundle Number = 93

Session outbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_OUT, Packets = 3527, Bytes = 350194 Traffic class session ID: 93 ACL Name: INTERNET_ACL_OUT, Packets = 5560801, Bytes = 1953107924 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 0.0.0.0 (F/F) Address Pool: TEDATA (F) Unnumbered Intf: [None] Feature: Session Timeout Timeout value is 432000 seconds Time remaining is 4d20h Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 03:04:47 AAA Service ID = 2936012811 Service: OPENGARDEN_SERVICE, Active Time = 03:04:47

Service: PBHK_SERVICE, Active Time = 03:04:47 Interface: Virtual-Template500, Active Time = 03:04:47 LAB-router-10K# CCCCC This is a secured device Unauthorized use is prohibited by law User Access Verification Username: Username: Username: planning Password: LAB-router-10K>

CCCCC This is a secured device Unauthorized use is prohibited by law User Access Verification Username: Username: Username: planning Password: LAB-router-10K> LAB-router-10K>

LAB-router-10K>ena Password: % Access denied LAB-router-10K>ena Password: % Access denied LAB-router-10K> LAB-router-10K>ena Password: % Access denied LAB-router-10K>ena Password: LAB-router-10K#sho ip access-lists DSLAM-ACCESS Extended IP access list DSLAM-ACCESS 10 permit udp 212.103.165.0 0.0.0.255 any eq snmp 20 permit icmp 212.103.165.0 0.0.0.255 any echo 30 permit icmp host 212.103.160.210 any echo 40 permit icmp host 213.158.190.38 any echo 50 permit icmp host 213.158.162.92 any echo 60 permit udp host 213.158.162.92 any eq snmp 70 permit udp host 163.121.250.6 any eq snmp 80 permit udp host 196.210.224.1 any eq snmp 90 permit udp host 213.158.190.38 any eq snmp 100 permit udp host 212.103.160.67 any eq snmp 110 permit udp 212.103.160.210 0.0.0.8 any range snmp snmptrap 120 permit udp 212.103.160.210 0.0.0.8 any eq tftp 130 permit udp 212.103.160.210 0.0.0.8 any eq 13000 140 permit udp 212.103.160.210 0.0.0.8 any eq ntp 150 permit udp 212.103.160.210 0.0.0.8 gt 6500 any 160 permit udp 212.103.160.210 0.0.0.8 range 9000 11000 any 170 permit udp 212.103.160.210 0.0.0.8 range 14000 16000 any 180 permit udp 212.103.160.210 0.0.0.8 any eq 13001 190 permit udp 213.158.164.100 0.0.0.2 any eq snmp 200 permit udp host 163.121.160.218 any range snmp snmptrap 210 permit tcp 212.103.165.0 0.0.0.255 any eq www 220 permit tcp 10.255.101.0 0.0.0.255 any eq www 230 permit tcp 10.255.102.0 0.0.0.255 any eq www 240 deny tcp any any log-input 250 deny udp any any log-input 260 permit udp host 196.219.224.1 any eq snmp 270 permit icmp host 196.219.224.1 any echo 280 permit icmp host 212.103.160.218 any echo LAB-router-10K# LAB-router-10K# LAB-router-10K# LAB-router-10K# LAB-router-10K#show sss LAB-router-10K#show sss ses LAB-router-10K#show sss session a LAB-router-10K#show sss session all Current Subscriber Information: Total sessions 1 -------------------------------------------------Unique Session ID: 92 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 06:43:17, Last Changed: 06:43:17

Policy information: Authentication status: unauthen Configuration sources associated with this session: Service: OPENGARDEN_SERVICE, Active Time = 06:43:17 -------------------------------------------------Unique Session ID: 93 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 06:43:17, Last Changed: 06:43:17 ET 13:40:53.984 EGY Sat Jul 6 2002 other external event OLDST[2]:check-auth-needed NEWST[4]:authorizing fxn[9]:sss_pm_fsm_extern_event_author_found FLAGS:0 ET 13:40:53.984 EGY Sat Jul 6 2002 got apply config success OLDST[8]:wait-for-events NEWST[8]:wait-for-events fxn[3]:sss_pm_action_sm_req_apply_config_success FLAGS:F5A4 Policy information: Authentication status: unauthen Session inbound features: Feature: Service accounting Service: MONTHLY_2048 Method List: SME_ACCNT_LIST Packets = 10346918, Bytes = 846868364 Feature: Policing Upstream Params: Average rate = 512000, Normal burst = 96000, Excess burst = 192000 Config level = Service Profile Session outbound features: Feature: Service accounting Service: MONTHLY_2048 Method List: SME_ACCNT_LIST Packets = 15174961, Bytes = 14898141210 Feature: Policing Dnstream Params: Average rate = 2048000, Normal burst = 384000, Excess burst = 768000 Config level = Service Profile Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 06:43:17 -------------------------------------------------Unique Session ID: 91 Identifier: rediruser-1@tedata.net.eg SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 06:43:17, Last Changed: 06:43:17 Interface: Virtual-Access5 Policy information:

Authentication status: authen Active services associated with session: name "MONTHLY_2048" name "OPENGARDEN_SERVICE", applied before account logon name "PBHK_SERVICE", applied before account logon Rules, actions and conditions executed: subscriber rule-map tedata-parent-1 condition always event session-start 1 collect identifier unauthenticated-username 2 service-policy type service name PBHK_SERVICE 3 service-policy type service name OPENGARDEN_SERVICE subscriber rule-map tedata-parent-1 condition always event service-start 2 service-policy type service unapply name QUOTAREDIRECT_SERVICE 3 service-policy type service identifier service-name Session inbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_IN, Packets = 12081, Bytes = 813136 Traffic class session ID: 93 ACL Name: INTERNET_ACL_IN, Packets = 10347023, Bytes = 712341074 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Feature: Portbundle Hostkey Portbundle IP = 163.121.162.20 Bundle Number = 93

Session outbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_OUT, Packets = 6432, Bytes = 566804 Traffic class session ID: 93 ACL Name: INTERNET_ACL_OUT, Packets = 15175059, Bytes = 1776252919 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 0.0.0.0 (F/F) Address Pool: TEDATA (F) Unnumbered Intf: [None] Feature: Session Timeout Timeout value is 432000 seconds Time remaining is 4d17h Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 06:43:17 AAA Service ID = 2936012811 Service: OPENGARDEN_SERVICE, Active Time = 06:43:17 Service: PBHK_SERVICE, Active Time = 06:43:17 Interface: Virtual-Template500, Active Time = 06:43:17 LAB-router-10K#show sss session all Current Subscriber Information: Total sessions 1 -------------------------------------------------Unique Session ID: 92 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 06:46:55, Last Changed: 06:46:55

Policy information: Authentication status: unauthen Configuration sources associated with this session: Service: OPENGARDEN_SERVICE, Active Time = 06:46:55 -------------------------------------------------Unique Session ID: 93 Identifier: SIP subscriber access type(s): Traffic-Class Current SIP options: None Session Up-time: 06:46:55, Last Changed: 06:46:55 ET 13:40:53.984 EGY Sat Jul 6 2002 other external event OLDST[2]:check-auth-needed NEWST[4]:authorizing fxn[9]:sss_pm_fsm_extern_event_author_found FLAGS:0 ET 13:40:53.984 EGY Sat Jul 6 2002 got apply config success OLDST[8]:wait-for-events NEWST[8]:wait-for-events fxn[3]:sss_pm_action_sm_req_apply_config_success FLAGS:F5A4 Policy information: Authentication status: unauthen Session inbound features: Feature: Service accounting Service: MONTHLY_2048 Method List: SME_ACCNT_LIST Packets = 10460137, Bytes = 861745317 Feature: Policing Upstream Params: Average rate = 512000, Normal burst = 96000, Excess burst = 192000 Config level = Service Profile Session outbound features: Feature: Service accounting Service: MONTHLY_2048 Method List: SME_ACCNT_LIST Packets = 15332188, Bytes = 15044723082 Feature: Policing Dnstream Params: Average rate = 2048000, Normal burst = 384000, Excess burst = 768000 Config level = Service Profile Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 06:46:55 -------------------------------------------------Unique Session ID: 91 Identifier: rediruser-1@tedata.net.eg SIP subscriber access type(s): PPPoE/PPP Current SIP options: Req Fwding/Req Fwded Session Up-time: 06:46:55, Last Changed: 06:46:55 Interface: Virtual-Access5 Policy information:

Authentication status: authen Active services associated with session: name "MONTHLY_2048" name "OPENGARDEN_SERVICE", applied before account logon name "PBHK_SERVICE", applied before account logon Rules, actions and conditions executed: subscriber rule-map tedata-parent-1 condition always event session-start 1 collect identifier unauthenticated-username 2 service-policy type service name PBHK_SERVICE 3 service-policy type service name OPENGARDEN_SERVICE subscriber rule-map tedata-parent-1 condition always event service-start 2 service-policy type service unapply name QUOTAREDIRECT_SERVICE 3 service-policy type service identifier service-name Session inbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_IN, Packets = 12281, Bytes = 825492 Traffic class session ID: 93 ACL Name: INTERNET_ACL_IN, Packets = 10460304, Bytes = 725724319 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Feature: Portbundle Hostkey Portbundle IP = 163.121.162.20 Bundle Number = 93

Session outbound features: Traffic classes: Traffic class session ID: 92 ACL Name: OPENGARDEN_ACL_OUT, Packets = 6574, Bytes = 583958 Traffic class session ID: 93 ACL Name: INTERNET_ACL_OUT, Packets = 15332298, Bytes = 1920304088 Default traffic is dropped Unmatched Packets = 0, Re-classified packets (redirected) = 0 Non-datapath features: Feature: IP Config Peer IP Address: 0.0.0.0 (F/F) Address Pool: TEDATA (F) Unnumbered Intf: [None] Feature: Session Timeout Timeout value is 432000 seconds Time remaining is 4d17h Configuration sources associated with this session: Service: MONTHLY_2048, Active Time = 06:46:56 AAA Service ID = 2936012811 Service: OPENGARDEN_SERVICE, Active Time = 06:46:56 Service: PBHK_SERVICE, Active Time = 06:46:56 Interface: Virtual-Template500, Active Time = 06:46:56

1d09h: RADIUS(0000002A): Send Accounting-Request to 163.121.189.129:1813 id 2164 7/13, len 403 1d09h: RADIUS: authenticator FD FF 4F F7 E0 0D 63 DC - A6 48 C2 01 71 D8 E5 99

1d09h: RADIUS: Acct-Session-Id [44] 36 "2/0/2/200_A379F5D50E0000000000005 8" 1d09h: RADIUS: Framed-Protocol [7] 6 PPP [1] 1d09h: RADIUS: Vendor, Cisco [26] 21 1d09h: RADIUS: ssg-service-info [251] 15 "NMONTHLY_2048" 1d09h: RADIUS: Vendor, Cisco [26] 60 1d09h: RADIUS: Cisco AVpair [1] 54 "parent-session-id=2/0/2/200_A379F 5D50E00000000000057" 1d09h: RADIUS: Framed-IP-Address [8] 6 163.121.162.209 1d09h: RADIUS: Vendor, Cisco [26] 25 1d09h: RADIUS: Cisco AVpair [1] 19 "portbundle=enable" 1d09h: RADIUS: Vendor, Cisco [26] 26 1d09h: RADIUS: ssg-account-info [250] 20 "S163.121.162.20:93" 1d09h: RADIUS: User-Name [1] 27 "rediruser-1@tedata.net.eg" 1d09h: RADIUS: Vendor, Cisco [26] 21 1d09h: RADIUS: ssg-control-info [253] 15 "I1;4179141412" 1d09h: RADIUS: Vendor, Cisco [26] 21 1d09h: RADIUS: ssg-control-info [253] 15 "O8;1879997976" 1d09h: RADIUS: Acct-Input-Packets [47] 6 33006230 1d09h: RADIUS: Acct-Output-Packets [48] 6 41780866 1d09h: RADIUS: Acct-Input-Giga-Word[52] 6 1 1d09h: RADIUS: Acct-Output-Giga-Wor[53] 6 8 1d09h: RADIUS: Acct-Input-Octets [42] 6 4179141412 1d09h: RADIUS: Acct-Output-Octets [43] 6 1879997976 1d09h: RADIUS: Acct-Session-Time [46] 6 91021 1d09h: RADIUS: Acct-Terminate-Cause[49] 6 admin-reset [6] 1d09h: RADIUS: Vendor, Cisco [26] 39 1d09h: RADIUS: Cisco AVpair [1] 33 "disc-cause-ext=Local Admin Disc" 1d09h: RADIUS: Acct-Status-Type [40] 6 Stop [2] 1d09h: RADIUS: NAS-Port-Type [61] 6 PPPoEoVLAN [33] 1d09h: RADIUS: NAS-Port [5] 6 570425544 1d09h: RADIUS: NAS-Port-Id [87] 11 "2/0/2/200" 1d09h: RADIUS: Service-Type [6] 6 Framed [2] 1d09h: RADIUS: NAS-IP-Address [4] 6 163.121.162.20 1d09h: RADIUS: Acct-Delay-Time [41] 6 0 1d09h: RADIUS: Received from id 21647/12 163.121.189.129:1813, Accounting-respon se, len 29 1d09h: RADIUS: authenticator 3B 9E 5B 72 A4 94 7A A1 - C3 10 CE 70 C3 CF 76 CE 1d09h: RADIUS: Reply-Message [18] 9 1d09h: RADIUS: 53 75 63 63 65 73 73 [ Success] 1d09h: RADIUS: Received from id 21647/13 163.121.189.129:1813, Accounting-respon se, len 29 1d09h: RADIUS: authenticator E1 E0 02 B9 58 64 56 55 - 88 53 A5 A1 EF 6C B1 03 1d09h: RADIUS: Reply-Message [18] 9 1d09h: RADIUS: 53 75 63 63 65 73 73 [ Success]