boot-start-marker
boot system flash disk2:/c7200p-js-mz.122-31.SB10.bin
boot-end-marker
!
!
class-map type traffic match-any traffic-external-net
match access-group input 1
match access-group output 1
!
class-map type traffic match-any traffic-internal-net
match access-group input 110
match access-group output 111
!
policy-map type service service-external
class type traffic traffic-external-net
accounting aaa list default
!
class type traffic default in-out
drop
!
!
policy-map type service service-internal
class type traffic traffic-internal-net
accounting aaa list default
!
class type traffic default in-out
drop
!
!
policy-map type control PPP_SESSION
class type control always event session-start
!
interface Virtual-Template1
mtu 1492
bandwidth 64
ip unnumbered GigabitEthernet0/2
ip access-group 150 in
ip verify unicast reverse-path
no ip redirects
no ip proxy-arp
ip mtu 1492
ip flow ingress
ip flow egress
ip tcp adjust-mss 1452
load-interval 30
peer default ip address pool ADSL_POOL
fair-queue
ppp authentication pap callin
ppp eap refuse
ppp chap refuse
ppp ms-chap refuse
ppp ms-chap-v2 refuse
ppp ipcp dns 10.0.0.2 10.0.1.2
service-policy type control PPP_SESSION
при авторизации радиус отдаёт
Cisco-Account-Info = "Aservice-external"
Cisco-Account-Info = "Nservice-external"
Cisco-Account-Info = "Aservice-internal"
Cisco-Account-Info = "Nservice-internal"
Cisco-Service-Info = "Nservice-external"
Cisco-Service-Info = "QU;256000;32000;64000;D;256000;32000;64000"
Cisco-Service-Info = "Nservice-internal"
Cisco-Service-Info = "QU;512000;64000;12800;D;512000;64000;128000"
сервисы активируются, но в аккаунтинге по сервисам идёт весь трафик, вместе с дропанными пакетами, а вот "классический" радиус аккаунтинг считается правильно
в чём трабл?