AS5300 и gnuGK
Добавлено: 2009-11-14 16:48:10
Вобщем то проблема заключается в том что CISCO не регится на GNUGK.
GNUGK запущен на freebsd 7.2, в логах gnugk
на циске в параметрах интерфейса:
в итоге постоянно при sh gateway видим:
ну и для полной картины конфиг Gnugk:
GNUGK запущен на freebsd 7.2, в логах gnugk
Код: Выделить всё
>tail -f /var/log/gnugk/gnugk.log
2009/11/14 14:56:38.217 1 gk.cxx(591) GNU Gatekeeper with ID 'localhost' started
Gatekeeper(GNU) Version(2.3.0) Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=0,odbc=1,sqlite=1,large_fdset=0,crypto/ssl=1,h46018=1) Build(Jun 10 2009, 22:31:30) Sys(FreeBSD i386 7.2-RELEASE-p4)
2009/11/14 14:56:38.218 1 RasSrv.cxx(527) Listening to 192.168.254.1:1719(U)
2009/11/14 14:56:38.220 1 RasSrv.cxx(527) Listening to 192.168.254.1:1718(Mcast)
2009/11/14 14:56:38.220 1 RasSrv.cxx(527) Listening to 192.168.254.1:1721
2009/11/14 14:56:38.220 1 RasSrv.cxx(527) Listening to 192.168.254.1:7000
2009/11/14 14:56:38.221 1 RasSrv.cxx(893) RAS Broadcast listener listening at 0.0.0.0:1719(Bcast)
2009/11/14 14:56:38.221 1 gkauth.cxx(291) GKAUTH RadAliasAuth rule added to check RAS: ARQ RRQ, OTHER: NONE
2009/11/14 14:56:38.222 1 gkauth.cxx(291) GKAUTH default rule added to check RAS: ARQ BRQ DRQ GRQ IRQ LRQ RRQ URQ, OTHER: SETUP SETUPUNREG
Код: Выделить всё
interface FastEthernet0
ip address 192.168.254.2 255.255.255.0
no ip mroute-cache
duplex auto
speed auto
h323-gateway voip interface
h323-gateway voip id localhost ipaddr 192.168.254.1
h323-gateway voip h323-id cisco
Код: Выделить всё
H.323 ITU-T Version: 4.0 H323 Stack Version: 0.1
H.323 service is up
Gateway cisco is not registered to any gatekeeper
Alias list (CLI configured)
H323-ID cisco
Alias list (last RCF) is empty
Код: Выделить всё
cat /usr/local/etc/gnugk.ini
; An example configuration for
; RADIUS authentication using RadAliasAuth module
;
; Author:
; Michal Zygmuntowicz <m.zygmuntowicz@onet.pl>
; Standard stuff
[Gatekeeper::Main]
Fortytwo=42
TimeToLive=600
Name=localhost
Home=192.168.254.1
[RoutedMode]
GKRouted=1
H245Routed=0
[GkStatus::Auth]
rule=allow
[RasSrv::GWPrefixes]
cisco=8
; Put RadAliasAuth entry if RADIUS authentication
; should be used (you may also put additional
; entries for other authenticators)
; Currently only RRQ, ARQ and Setup are supported
[Gatekeeper::Auth]
RadAliasAuth=required;RRQ,ARQ
default=allow
; Configuration section for RadAuth authenticator module
[RadAliasAuth]
; List of RADIUS servers separated by ';'. Server name
; is specified as:
; <DNS or IP>[:auth_port[:acct_port[:secret]]]
; if port is ommited, default is taken from:
; 1. DefaultAuthPort key;
; 2. /etc/services ('radius') if 1. not specified.
Servers=127.0.0.1:1812
;Servers=192.168.1.1:1812:1813:secret1;192.168.2.1:1812:1813:secret2
; Local network interface address that RADIUS client should use
; when communicating with RADIUS server. Leave empty (not set)
; to be able to communicate with RADIUS servers on different
; subnets.
LocalInterface=
; By default (if this option is not set) RADIUS client
; allocates ports dynamically as specified by the operating system.
; If you want to restrict RADIUS client to use only some
; port range - set this parameter
RadiusPortRange=10000-11000
; Default port where non-accounting packets will be sent to.
; Overrides /etc/services and can be overriden in Servers key
; for particular RADIUS servers
DefaultAuthPort=1812
; Secret shared between the GNU Gk (NAS) and a RADIUS servers.
; Should be a cryptographically-strong password
; You can override this setting by setting a secret in the Servers line
SharedSecret=secret
; Timeout value (ms) for a single RADIUS request
RequestTimeout=2000
; Time interval (ms) for RADIUS requests identifiers to be unique
IdCacheTimeout=9000
; Timeout value (ms) for unused RADIUS sockets to be deleted
SocketDeleteTimeout=60000
; Number of request retransmissions per RADIUS server (1==no retransmission)
RequestRetransmissions=2
; How requests should be retransmitted
; 0: Server A attempt #1, ..., Server A attempt #RequestRetransmissions;
; Server B attempt #1, ..., Server B attempt #RequestRetransmissions;
; ...
; 1: Server A attempt #1, Server B attempt #1, ...
; ...
; Server A attempt #RequestRetransmissions, Server B attempt #RequestRetransmissions, ...
RoundRobinServers=1
; Set to 1 if RADIUS packets should contain Cisco VSAs
; (h323-conf-id,h323-call-type,h323-call-origin,etc.)
AppendCiscoAttributes=1
; Set to 1 if RADIUS packets should contain a Cisco h323-ivr-out VSA
; containing a list of all aliases the endpoint wishes to register
; AppendCiscoAttributes must be set to 1 above.
IncludeTerminalAliases=1
; If not set, approtiate alias it extracted from RRQ or ARQ.
; Otherwise, this string is used as User-Name attribute
; for outgoing RADIUS requests
FixedUsername=
; If not set, User-Password attribute is set to the value
; copied from User-Name (example: if User-Name="user1",
; then User-Password="user1" too).
; Otherwise, this string is used as User-Password attribute
; for outgoing RADIUS requests
FixedPassword=
; Choose between the original dialed number and the rewritten one
UseDialedNumber=0
; EOF