Parse vsa parts error

parse vsa parts error

00:13:38: RADIUS/DECODE: parse VSA parts error #play prompt accordind to failure vsa code??? get returnCode. It defines attribute values, thereby allowing you to interpret attribute output such as parsing requests. A dictionary file contains the following information. This error originated either by throwing inside of an async function Parsing isn't overzealous, no, it's running various parts of the.

Similar video

XML Parsing Error - Quick Fix

Parse vsa parts error - commit error

vprnservice-idsubscriber-interfaceip-int-nameipv6 delegated-prefix-length or on the dhcpv6 server configure router dhcp6 local-dhcp-server server-namepoolpool-namedelegated-prefix-length). DPL values outside the limits are treated as setup failures.

26.6527.174

Alc-Lease-Time

Defines the lease-time in seconds for RADIUS proxy and create-host-CoA scenarios only. The [27] Session-Timeout is interpreted and used as IPoE lease-time if [26.6527.174] Alc-lease-Time is omitted. Returning attribute [26.6527.174] Alc-Lease-Time in other scenarios than radius-proxy and create-host-CoA are treated as setup failures.

26.6527.175

Alc-DSL-Line-State

Status of the DSL line obtained via ANCP can be one of three value: SHOWTIME (the modem is ready to transfer data), IDLE (line is idle) or SILENT (line is silent). Attribute is included or excluded based on configure subscriber-mgmt authentication-policy/radius-accounting-policynameinclude-radius-attribute access-loop-options.

26.6527.176

Alc-DSL-Type

Type of the DSL line (ADSL1, ADSL2, ADSL2PLUS, VDSL1, VDSL2, SDSL, other) obtained via ANCP.

This attribute is included or excluded based on configure subscriber-mgmt authentication-policy/radius-accounting-policynameinclude-radius-attribute access-loop-options.

26.6527.177

Alc-Portal-Url

The URL to which traffic matching the host’s IPv4 filter entry with HTTP redirect action is redirected. The URL overrides the configured URL in the redirect filter. RADIUS overrides must explicitly be enabled: configure filter ip-filterfilter-identryentry-idaction http-redirect rdr-url-stringallow-radius-override.

26.6527.178

Alc-Ipv6-Portal-Url

The URL to which traffic matching the host’s IPv6 filter entry with HTTP redirect action is redirected. The URL overrides the configured URL in the redirect filter. RADIUS overrides must explicitly be enabled: configure filter ipv6-filter filter-identryentry-idaction http-redirect rdr-url-stringallow-radius-override.

26.6527.180

Alc-SAP-Session-Index

Per SAP, this is a unique PPPoE or IPoE session index that can be included in RADIUS Access Request messages. The lowest free index is assigned to a new PPPoE or IPoE session. Attribute is included or excluded based on configure subscriber-mgmt authentication-policynameinclude-radius-attribute sap-session-index.

26.6527.181

Alc-SLAAC-IPv6-Pool

A pool name that can be used in local address assignment to assign an IPv6 SLAAC prefix via a Router Advertisement to the WAN side of the IPoE or PPPoE user.

Alc-SLAAC-IPv6-Pool names longer than the allowed maximum are treated as host setup failures. If local-address-assignment is not enabled on the group-interface for ipv6 client-application ppp-slaac, then the PPP session is terminated. If local-address-assignment is not enabled on the group-interface for ipv6 client-application ipoe-slaac, then the IPoE host is not instantiated.

26.6527.183

Alc-WPP-Error-Code

This attribute specifies the value of the ErrCode that the system should use in a WPP ACK_AUTH packet. This attribute can only be included in a RADIUS Access-Reject packet.

26.6527.185

Alc-Onetime-Http-Redirect-Reactivate

An indication to reactivate a onetime HTTP redirect filter for the host.

When received in a RADIUS CoA message, the filter with the value indicated by [26.6527.136] Alc-Onetime-Http-Redirection-Filter-Id is activated.

If [26.6527.136] Alc-Onetime-Http-Redirection-Filter-Id contains the value 0, then the existing onetime http redirect filter id associated with the host is removed.

If no [26.6527.136] Alc-Onetime-Http-Redirection-Filter-Id VSA is provided in the RADIUS CoA message, then the existing onetime http redirect filter id associated with the host is applied.

The value of the [26.6527.185] Alc-Onetime-Http-Redirect-Reactivate VSA is opaque. It is the presence of the VSA in a RADIUS CoA that triggers the action.

26.6527.191

Alc-ToServer-Dhcp6-Options

This attribute contains DHCPv6 client options present in a DHCPv6 Solicit or Request message to be passed to RADIUS in an Access-Request. Up to two attributes are included in the Access-Request message when the length of the DHCPv6 options exceeds the maximum length of a single attribute. No attributes are included if the total length of the DHCPv6 options exceeds 494 bytes.

When the DHCPv6 solicit or request message is encapsulated in a Relay-Forward message, only the inner DHCPv6 client options are copied in the Alc-ToServer-Dhcp6-Options attribute. Options inserted by a Relay Agent are ignored.

Attribute is included or excluded based on configure subscriber-mgmt authentication-policynameinclude-radius-attribute dhcp6-options.

For DHCPv6 triggered authentication in a Distribute Subscriber Management (DSM) context, this attribute contains the DHCPv6 client options as sent to the WLAN-GW. Inclusion of this attribute is configured via configure aaa isa-radius-policypolicy-nameauth-include-attributes dhcp6-options.

26.6527.192

Alc-ToClient-Dhcp6-Options

The value of this attribute represents DHCPv6 options encoded in a hexadecimal format. DHCPv6 options originated by RADIUS are appended to the options already present in the DHCPv6 Advertise and Reply messages towards the client.

Passing the RADIUS obtained DHCPv6 options to the client is supported for both DHCPv6 proxy and relay.

Only the attributes within the defined limits are parsed and stored; the remaining attributes are silently ignored.

26.6527.200

Alc-v6-Preferred-Lifetime

An IPv6 address or prefix preferred lifetime is the length of time that a valid address or prefix is preferred (for example, the time until deprecation). When the preferred lifetime expires, the address or prefix becomes deprecated (it can still be used in existing communications but should not be used as a source in new communications).

This attribute is applicable only when an IPv6 address or prefix is assigned via RADIUS (DHCPv6 proxy). It overrides the dhcp6 proxy-server preferred-lifetime configuration on the group-interface.

The attribute value is expressed in seconds. Values outside the allowed range result in a setup failure.

If, for the final determined values from the different sources (LUDB, RADIUS, defaults), the following rule is violated:

renew timer 7705 SAR-8 rebind timer <= preferred lifetime <= valid lifetime

then the default timers are used: renew-timer = 30 min, rebind-timer = 48 min, preferred-lifetime = 1hr, valid-lifetime = 1 day.

Note that only a single value can be specified that applies to both IA-NA address and IA-PD prefix.

26.6527.201

Alc-v6-Valid-Lifetime

The IPv6 address or prefix valid lifetime is the length of time an address or prefix remains in the valid state (for example, the time until invalidation). When the valid lifetime expires, the address or prefix becomes invalid and must no longer be used in communications. This attribute is used as the DHCPv6 lease time.

This attribute is applicable only when an IPv6 address or prefix is assigned via RADIUS (DHCPv6 proxy). Overrides the dhcp6 proxy-server valid-lifetime configuration on the group-interface.

The attribute value is expressed in seconds. Values outside the allowed range result in a setup failure.

If, for the final determined values from the different sources (LUDB, RADIUS, defaults), the following rule is violated:

renew timer <= rebind timer <= preferred lifetime <= valid lifetime

then the default timers are used: renew-timer = 30 min, rebind-timer = 48 min, preferred-lifetime = 1hr, valid-lifetime = 1 day.

Note that only a single value can be specified that applies to both IA-NA address and IA-PD prefix.

26.6527.202

Alc-Dhcp6-Renew-Time

The attribute value represents the DHCPv6 lease renew time (T1). T1 is the time at which the client contacts the addressing authority to extend the lifetimes of the DHCPv6 leases (addresses or prefixes).

This attribute is applicable only when an IPv6 address or prefix is assigned via RADIUS (DHCPv6 proxy). Overrides the dhcp6 proxy-server renew-timer configuration on the group interface.

The attribute value is expressed in seconds. Values outside the allowed range result in a setup failure.

If, for the final determined values from the different sources (LUDB, RADIUS, defaults), the following rule is violated:

renew timer <= rebind timer <= preferred lifetime <= valid lifetime

then the default timers are used: renew-timer = 30 min, rebind-timer = 48 min, preferred-lifetime = 1hr, valid-lifetime = 1 day.

Note that only a single value can be specified that applies to both IA-NA address and IA-PD prefix.

26.6527.203

Alc-Dhcp6-Rebind-Time

The attribute value represents the DHCPv6 lease rebind time (T2). T2 is the time at which the client contacts any available addressing authority to extend the lifetimes of DHCPv6 leases.

This attribute is applicable only when an IPv6 address or prefix is assigned via RADIUS (DHCPv6 proxy). The attribute overrides the dhcp6 proxy-server rebind-timer configuration on the group interface

The attribute value is expressed in seconds. Values outside the allowed range result in a setup failure.

If, for the final determined values from the different sources (LUDB, RADIUS, defaults), the following rule is violated:

renew timer <= rebind timer <= preferred lifetime <= valid lifetime

then the default timers are used: renew-timer = 30 min, rebind-timer = 48 min, preferred-lifetime = 1hr, valid-lifetime = 1 day.

Note that only a single value can be specified that applies to both IA-NA address and IA-PD prefix.

26.6527.217

Alc-UPnP-Sub-Override-Policy

Specifies the UPnP policy to use for this L2-Aware subscriber. The policy must be configured in configure service upnp upnp-policypolicy-name.

Overrides the configured policy in the sub-profile for the subscriber: configure subscriber-mgmt sub-profilenameupnp-policypolicy-name.

The value “_tmnx_no_override” removes any existing override and installs the upnp-policy configured in the sub-profile instead.

The value “_tmnx_disabled” creates a special override that disables UPnP for this subscriber.

Specifying a non-existing policy results in a host or session setup failure or in a CoA Reject.

All hosts belonging to the subscriber are affected by a UPnP policy override.

Changing the UPnP policy clears all existing UPnP mappings.

26.6527.228

Alc-Trigger-Acct-Interim

When included in a CoA message an accounting interim update is generated for all accounting modes that have interim-updates enabled. The Alc-Trigger-Acct-Interim attribute with free formatted string value is echoed in the CoA triggered accounting interim update message. The [26.6527.163] Alc-Acct-Triggered- Reason attribute in the interim update is set to 18 (CoA-Triggered).

26.6527.232

Alc-Acct-Interim-IvI

Tagged Attribute.

The interval in seconds at which Acct-Interim-Update messages should be generated. Overrides the local configured update-interval value in the RADIUS accounting policy. Only takes effect if interim-updates are enabled for one of the accounting modes in the RADIUS accounting policy.

With attribute value=0, the interim accounting is switched off.

The tag value (1 to 5) indicates which RADIUS accounting policy in the subscriber profile is updated.

To change the update interval of the first accounting policy, attribute [85] Acct-Interim-Interval takes precedence over [26.6527.232] Alc-Acct-Interim-Ivl with tag 1 when both are included.

26.6527.234

Alc-DNAT-Override

A composite RADIUS attribute used to modify DNAT function for L2-Aware NAT subscribers:

  1. enable or disable DNAT functionality without affecting SNAPT

  1. modify destination IP address in DNAT

After the DNAT configuration is modified via CoA (by enabling or disabling DNAT or changing the DNAT IP address), the existing flows remain active for five more seconds while the new flows are being created in accordance with the new configuration. After a five-second timeout, the stale flows are cleared from the system.

If multiple Alc-DNAT-Override attributes with conflicting actions are received in the same CoA or Access-Accept, the last one takes precedence.

26.6527.242

Alc-Radius-Py

A free format attribute reserved for use in combination with a RADIUS Python script. SR OS ignores the attribute when received in an access accept or CoA and will not generate the attribute.

The primary purpose for this attribute is to interact with RADIUS servers that do not support RFC 6929 extended and long extended vendor specific attribute types. This attribute can be used between the RADIUS server and the Python script. The Python script should convert the attribute value in an RFC 6929 compliant attribute format.

26.6527.244

Alc-Force-DHCP-Relay

When this attribute is included in an Access Accept message at the authentication of a data triggered subscriber hosts IPoE session, then a DHCP relay is performed when the subscriber host in the session is promoted to a DHCP host at renew or rebind.

The IP and/or IPv6 address/prefix origin is set to DHCP or DHCP6 for the data triggered subscriber host that is promoted to a DHCP host.

The IP address/prefix for all IP stacks of the subscribers IPoE session must also be included in the Access Accept.

Attributes with invalid value are ignored.

241.26.6527.16

Alc-IPv6-Router-Adv-Policy

This attribute specifies the Router Advertisement policy to be used for this subscriber host or session. The Router Advertisement policy is configured in configure subscriber-mgmt router-advertisement-policy name. The Router Advertisement policy overrides the default Router Advertisement parameters configured in the ipv6router-advertisementsCLI context at the group interface or subscriber interface (wholesale or retail).

Referencing a non existing policy results in a subscriber host or session setup failure or a CoA reject.

241.26.6527.17

Alc-Nat-Outside-IPs

This attribute allows to specify an outside NAT IP address from AAA instead of allocating an address from the local NAT pools. An IP address can be provided for each policy.

241.26.6527.18

Alc-Mld-Import-Policy

This attribute overrides the subscriber’s current list of dynamic MLD import policies. The order in which the policies were added can be checked with show router [router-instance] mld hosts hostipv6-addressdetail. Note that the configured MLD import policy (configure subscriber-mgmt mld-policymld-policy-nameimportpolicy-name) cannot be overridden and is always applied as the last policy in the MLD import policies list. As the import policies are evaluated in the applied order using a match and exit, it is good practice to only include a default-action in the configured MLD import policy.

Access-Accept fails and CoA is rejected if more than 14 attributes are present.

241.26.6527.27

Alc-IPv6-Sub-If-Prefix

This attribute installs a subscriber interface IPv6 prefix of type pd, wan-host or both. This is similar to a statically configured IPv6 prefix on a subscriber interface. The prefix is part of the subscriber host or session state. The prefix is removed from the system when the subscriber host or session disconnects. An invalid prefix, such as when overlapping with a static provisioned prefix, results in a subscriber host or session setup failure.

241.26.6527.35

Alc-Mld-Import-Policy-Modif

This attribute modifies the subscriber’s dynamic MLD import policy list. The command can either add or delete an MLD import policy to or from the list.

The CoA is rejected if more than the allowed number of attributes are included or if the number of resulting dynamic MLD import policies is more than 14.