Radius accounting sends wrong data

Forum|Forum|2 years ago
July 12, 2024
3 replies
1295 views

Hello, we use internal Freeradius 3.2 server to manage traffic consumption by users. Since version 7.4.4 we found that users ask for new credentials not so often as before. We implemented python3 module to see log of data server receives from FortiGate NAS FG-60F and for case of downloading 100Mb file, we can see that there is 50 times less data sent by NAS than it should be.

Our log:

Before downloading:
2024-07-12 11:57:01,067 - Parsed packet: User: %Username%, Acct-Input-Octets: 1086186, Acct-Output-Octets: 1022799, Current Packet: 2108985 bytes

After downloading 100Mb:
2024-07-12 12:01:01,070 - Parsed packet: User: %Username%, Acct-Input-Octets: 1188278, Acct-Output-Octets: 1101556, Current Packet: 2289834 bytes

Treat this message as bug report, because in case of Mikrotik router with same server it calculates correctly on test files 100Mb and 1Gb

Radius

amrit

Staff & Editor

I do not understand your question fully. Could you please elaborate on your point about how fortigate is not working correctly? If you want to report an issue, I recommend opening a case and reporting it via a TAC ticket.

SC_AlexAuthor

New Member

The problem is in version 7.4.4 - there is wrong data from Fortigate FG60F acting as NAS it sends to freeradius server
And I'm unable to register TAC ticket as system returns:
Invalid input data: The serial number is not registered.

And for users on 10Mbps vlan it is really looking unrealistic:

On all 2 units I have

amrit

Staff & Editor

Because your Fortigate is not registered with us so you won't be able to open a TAC ticket . This issue requires in, depth analysis so you can register you device following this link :

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/893081/registering-fortigate

To work with TAC you device should have an active support contract

Sign up

Login with SSO

Login to the community

Login with SSO