Hello,
I have a problem with my as5350 gateway. I work gateway-to-gateway. I dont`use gatekeeper. I try to terminate calls. My scenario is:
GW1------>myGW---controller e1------------>GSM Channel Bank
|
|
freeradius
If a call comes from GW1 to myGW, first I want to authenticate and authorize call based on the ip address of GW1 via freeradius. Then account. I can only send accounting request to radius. I can not send authenticating and authorizing request to radius. Can you help me?
My config is:
Current configuration : 10036 bytes
!
! Last configuration change at 13:17:29 GMT Sat Jan 1 2000 by shrntrsn
!
version 12.2
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
no boot startup-test
aaa new-model
!
!
aaa authentication login default group radius
aaa authentication login h323 group radius
aaa authentication ppp default group radius
aaa authentication ppp h323 group radius
aaa authorization exec h323 group radius if-authenticated
aaa authorization network default group radius if-authenticated
aaa accounting update newinfo
aaa accounting network h323 start-stop group radius
aaa accounting connection h323 start-stop group radius
aaa accounting resource h323 start-stop group radius
aaa session-id common
!
!
resource-pool disable
clock timezone GMT 0
clock calendar-valid
spe country turkey
!
!
!
!
!
ip subnet-zero
ip cef
!
class-map match-all deneme
match none
!
!
policy-map deneme
!
voice call send-alert
voice rtp send-recv
!
voice service pots
!
voice class codec 312
codec preference 1 g729r8
!
voice class codec 99
codec preference 1 g729r8
codec preference 2 g723r63
!
voice class codec 80
codec preference 1 g729r8
!
!
!
voice class h323 1
call start fast
!
voice class h323 99
call start fast
!
voice class h323 80
h225 timeout tcp establish 10
call start fast
!
!
!
!
!
fax interface-type fax-mail
mta receive maximum-recipients 0
!
controller E1 3/0
shutdown
!
controller E1 3/1
shutdown
!
controller E1 3/2
ds0-group 1 timeslots 1-15 type r2-digital
ds0-group 2 timeslots 17-31 type r2-digital
ds0 busyout 28-31 hard
!
controller E1 3/3
shutdown
!
gw-accounting h323
gw-accounting h323 vsa
gw-accounting voip
!
!
interface FastEthernet0/0
ip address x.x.x.x y.y.y.y
ip access-group h323 in
duplex auto
speed auto
no cdp enable
h323-gateway voip bind srcaddr x.x.x.x
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
shutdown
no ip address
no ip mroute-cache
clockrate 2000000
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
interface Async1/00
no ip address
!
interface Async1/01
no ip address
!
interface Async1/02
no ip address
ip classless
ip route 0.0.0.0 0.0.0.0 y.y.y.y
no ip http server
snmp-server community aaaaa RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps calltracker
snmp-server enable traps tty
snmp-server enable traps modem-health
snmp-server enable traps ds0-busyout
snmp-server enable traps ds1-loopback
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps fru-ctrl
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps envmon
snmp-server enable traps aaa_server
snmp-server enable traps bgp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-messa
ge
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps rtr
snmp-server enable traps syslog
snmp-server enable traps dlsw
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps voice poor-qov
snmp-server enable traps dnis
snmp-server enable traps xgcp
snmp ifmib ifalias long
!
!
radius-server host qqqq auth-port 1812 acct-port 1813
radius-server retransmit 3
radius-server attribute 8 include-in-access-req
radius-server key 222222222
radius-server vsa send accounting
radius-server vsa send authentication
call rsvp-sync
!
voice-port 3/2:1
input gain 6
echo-cancel coverage 16
compand-type a-law
cptone TR
timeouts interdigit 2
timeouts ringing infinity
bearer-cap Speech
!
voice-port 3/2:2
input gain 6
echo-cancel coverage 16
compand-type a-law
cptone TR
timeouts interdigit 2
timeouts ringing infinity
bearer-cap Speech
!
voice-class aaa 1
authentication method h323
authorization method h323
accounting method h323
mgcp profile default
!
dial-peer cor custom
!
!
!
dial-peer voice 99 voip
incoming called-number ssss
voice-class codec 99
voice-class h323 99
dtmf-relay h245-signal h245-alphanumeric
!
dial-peer voice 1 pots
max-conn 20
destination-pattern T
port 3/2:1
forward-digits 11
prefix ,
voice class aaa 1
!
dial-peer voice 2 pots
max-conn 20
destination-pattern
forward-digit 11
port 3/2:2
prefix ,
---------------------------------
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
I have a problem with my as5350 gateway. I work gateway-to-gateway. I dont`use gatekeeper. I try to terminate calls. My scenario is:
GW1------>myGW---controller e1------------>GSM Channel Bank
|
|
freeradius
If a call comes from GW1 to myGW, first I want to authenticate and authorize call based on the ip address of GW1 via freeradius. Then account. I can only send accounting request to radius. I can not send authenticating and authorizing request to radius. Can you help me?
My config is:
Current configuration : 10036 bytes
!
! Last configuration change at 13:17:29 GMT Sat Jan 1 2000 by shrntrsn
!
version 12.2
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
no boot startup-test
aaa new-model
!
!
aaa authentication login default group radius
aaa authentication login h323 group radius
aaa authentication ppp default group radius
aaa authentication ppp h323 group radius
aaa authorization exec h323 group radius if-authenticated
aaa authorization network default group radius if-authenticated
aaa accounting update newinfo
aaa accounting network h323 start-stop group radius
aaa accounting connection h323 start-stop group radius
aaa accounting resource h323 start-stop group radius
aaa session-id common
!
!
resource-pool disable
clock timezone GMT 0
clock calendar-valid
spe country turkey
!
!
!
!
!
ip subnet-zero
ip cef
!
class-map match-all deneme
match none
!
!
policy-map deneme
!
voice call send-alert
voice rtp send-recv
!
voice service pots
!
voice class codec 312
codec preference 1 g729r8
!
voice class codec 99
codec preference 1 g729r8
codec preference 2 g723r63
!
voice class codec 80
codec preference 1 g729r8
!
!
!
voice class h323 1
call start fast
!
voice class h323 99
call start fast
!
voice class h323 80
h225 timeout tcp establish 10
call start fast
!
!
!
!
!
fax interface-type fax-mail
mta receive maximum-recipients 0
!
controller E1 3/0
shutdown
!
controller E1 3/1
shutdown
!
controller E1 3/2
ds0-group 1 timeslots 1-15 type r2-digital
ds0-group 2 timeslots 17-31 type r2-digital
ds0 busyout 28-31 hard
!
controller E1 3/3
shutdown
!
gw-accounting h323
gw-accounting h323 vsa
gw-accounting voip
!
!
interface FastEthernet0/0
ip address x.x.x.x y.y.y.y
ip access-group h323 in
duplex auto
speed auto
no cdp enable
h323-gateway voip bind srcaddr x.x.x.x
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
shutdown
no ip address
no ip mroute-cache
clockrate 2000000
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
interface Async1/00
no ip address
!
interface Async1/01
no ip address
!
interface Async1/02
no ip address
ip classless
ip route 0.0.0.0 0.0.0.0 y.y.y.y
no ip http server
snmp-server community aaaaa RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps calltracker
snmp-server enable traps tty
snmp-server enable traps modem-health
snmp-server enable traps ds0-busyout
snmp-server enable traps ds1-loopback
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps fru-ctrl
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps envmon
snmp-server enable traps aaa_server
snmp-server enable traps bgp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-messa
ge
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps rtr
snmp-server enable traps syslog
snmp-server enable traps dlsw
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps voice poor-qov
snmp-server enable traps dnis
snmp-server enable traps xgcp
snmp ifmib ifalias long
!
!
radius-server host qqqq auth-port 1812 acct-port 1813
radius-server retransmit 3
radius-server attribute 8 include-in-access-req
radius-server key 222222222
radius-server vsa send accounting
radius-server vsa send authentication
call rsvp-sync
!
voice-port 3/2:1
input gain 6
echo-cancel coverage 16
compand-type a-law
cptone TR
timeouts interdigit 2
timeouts ringing infinity
bearer-cap Speech
!
voice-port 3/2:2
input gain 6
echo-cancel coverage 16
compand-type a-law
cptone TR
timeouts interdigit 2
timeouts ringing infinity
bearer-cap Speech
!
voice-class aaa 1
authentication method h323
authorization method h323
accounting method h323
mgcp profile default
!
dial-peer cor custom
!
!
!
dial-peer voice 99 voip
incoming called-number ssss
voice-class codec 99
voice-class h323 99
dtmf-relay h245-signal h245-alphanumeric
!
dial-peer voice 1 pots
max-conn 20
destination-pattern T
port 3/2:1
forward-digits 11
prefix ,
voice class aaa 1
!
dial-peer voice 2 pots
max-conn 20
destination-pattern
forward-digit 11
port 3/2:2
prefix ,
---------------------------------
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!