Radius+Portal协议与业务流程 课件.ppt

0,1,Radius+/Portal协议与业务流程,固网产品课程开发室,0,2,引入,了解标准radius认证计费基本流程（参考radius原理与应用课件）；了解标准radius协议的基本知识（参考radius原理与应用课件）；了解portal（门户网站）的基本原理（参考相关文档）；,学习本课件前，最好具备如下基本知识：,0,3,学习目标,掌握radius+认证计费流程了解portal门户网站业务了解宽带BAS设备与iTellin智能业务平台对接配合使用过程中常见的业务流程,学习完本课程，您应该能够：,0,4,Portal：Portal业务可以看做是一个业务门户、服务门户和内容门户。用户在上网时，可以通过Portal入口服务器（PortalServer），来灵活的选择适合用户自己的业务，用户可以在WWW页面上进行Web认证和各种业务选择。Portal业务提供有面向于用户的客户服务中心，使得运营商在内容服务的领域中找到了自己的位置，可以提供各种广告充值，提供个性化页面服务和信息服务。同时还提供了一个通讯平台为在PortalServer上开发新业务提供了底层的支持。,基本概念,0,5,Radius与Radius+：Radius：目前互联网应用中比较流行的用户验证、授权、计费协议。RFC2865/2866/2869定义了标准radius协议的所有规范。Radius+：各通信设备厂家分别对应于原标准radius协议所未定义到的新应用自行开发定义了一套扩展的radius协议报文和属性，成为radius+协议。在华为iTellin中支持华为radius+1.0和radius+1.1两种radius+协议。,iTellin：智能业务平台iTellin中包含了portalserver和iSCP（宽带业务控制点，相当于radiusserver）等功能模块。,基本概念,0,6,概述,通常标准Radius用户上网过程：,在拨号连接客户端中输入用户名和密码并提交；Modem和交换机进行协商通讯；（等待中，完成BAS与iSCP之间的交互过程）PC上提示登录网络成功。,0,7,概述,用户提出上线请求；BAS收到用户的请求后，向iSCP发出Access-Request(code=1)的认证请求报文；iSCP向BAS发出相应的Access-Accept(code=2)或Access-Reject(code=3)响应报文；BAS根据iSCP发回的属性对用户进行配置，同时向iSCP发出Accounting-Request(code=4/start)的计费开始请求报文；iSCP发回相应的计费响应报文；用户上网过程中，BAS定时向iSCP发出Accounting-Request(Interim-Update)实时计费请求；iSCP发回相应的计费响应报文；用户提出下线请求；BAS收到用户的请求后，向iSCP发出Accounting-Request(stop)计费结束请求报文；iSCP发回相应的计费响应报文；BAS收到iSCP的计费结束响应报文后，断开用户的连接。,BAS与iSCP之间的交互过程：,0,8,概述,Radius+1.08850和iTELLIN所使用的Radius协议类型应一致。,8850数据配置,0,58,用户PC通过DHCP获取IP地址；打开IE，输入任意IP地址，被强制到“00”的Portal页面上；在Portal页面上输入正确的用户名和密码，按“确定”登录；,用户登录界面,0,59,用户上线：portal协议,/Portal-Server将各种交互信息提交PCS，由PCS继续后续的交互*10/21/200217:09:33:630-slot0-_PCS-debug-M00:RecvPacketFromPortalServer(HEX):0101000000270000c0a8000500000000/PortalV1.0/REQ_CHALLENGE/CHAP*10/21/200217:09:33:630-slot0-_PAC-debug-M00:PCS-PACMsgType:PS_REQ_CHALLENGE;PrtlUserIP:*10/21/200217:09:33:640-slot0-_PAC-debug-M00:PAC-PCSCurrentState:AsNullMsgType:PAC_CHALL_SUCC;PrtlUserIP:,0,60,用户上线：portal协议,*10/21/200217:09:33:650-slot0-_PCS-debug-M00:RecvPacketFromPortalServer(HEX):0103000000275d06c0a800050000000201166b646c687379733635313440697370312e3230310412b4c4f61030c97b262d942782601b20c6/REQ_AUTH/username/len/kdlhsys6514isp1.201/chap-password/len/password*10/21/200217:09:33:650-slot0-_PAC-debug-M00:PCS-PACCurrentState:AsChapMsgType:PS_CHAP_REQ_AUTH;PrtlUserIP:/PAC将用户名、口令提交给AAA模块进行Radius认证：*10/21/200217:09:33:660-slot0-_PAC-debug-M00:PAC-AAACurrentState:AsChapMsgType:PAC_REQ_AUTH;PrtlUserIP:PrtlUserCID:11.0.12;PrtlUserPAID:1e72a9d8,0,61,用户上线：Radius+1.0协议（code1）,Radius认证过程：code=1id=35length=144/Access-Request007820039570037f6004e83*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1.201*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(3)(CHAP-Password):0 x60 xb40 xc40 xf60 x100 x300 xc90 x7b0 x260 x2d0 x940 x270 x820 x600 x1b0 x200 xc6*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(60)(CHAP-Challenge):0 x00 x00 x780 x20 x00 x00 x390 x570 x00 x00 x370 xf60 x00 x00 x4e0 x83,0,62,用户上线：Radius+1.0协议（code1）,*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(6)(Service-Type):2*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(4)(NAS-IP-Address):54*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(32)(NAS-Identifier):ESR8850*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(127)(Connect-Id):369098764*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(61)(NAS-Port-Type):15*10/21/200217:09:33:770-slot0-AAA-debug-Packet:attribute(128)(Connect-Port):ESR8850-11000000010vlan/使用PortalV1.0时Portal-Server不对逻辑端口号进行处理,0,63,code=2id=35length=56/Access-Accept676995b437901624a34d2c04cc3244c*10/21/200217:09:33:860-slot0-AAA-debug-Packet:attribute(121)(Input-Peak-Rate):9994240*10/21/200217:09:33:860-slot0-AAA-debug-Packet:attribute(122)(Input-Average-Rate):9994240*10/21/200217:09:33:860-slot0-AAA-debug-Packet:attribute(123)(Input-Basic-Rate):9994240*10/21/200217:09:33:860-slot0-AAA-debug-Packet:attribute(124)(Output-Peak-Rate):9994240*10/21/200217:09:33:860-slot0-AAA-debug-Packet:attribute(125)(Output-Average-Rate):9994240*10/21/200217:09:33:860-slot0-AAA-debug-Packet:attribute(126)(Output-Basic-Rate):9994240,用户上线：Radius+1.0协议（code2）,0,64,用户上线：portal协议,/AAA模块将认证结果通知PAC*10/21/200217:09:33:860-slot0-_PAC-debug-M00:AAA-PACCurrentState:AsAuthMsgType:AAA_AUTH_SUCC;PrtlUserIP:PrtlUserCID:11.0.12;PrtlUserPAID:1e72a9d8*10/21/200217:09:33:870-slot0-_PAC-debug-M00:PAC-PCSCurrentState:AsAuthMsgType:PAC_AUTH_SUCC;PrtlUserIP:*10/21/200217:09:33:880-slot0-_PCS-debug-M00:RecvPacketFromPortalServer(HEX):0107000000275d06c0a8000500000000*10/21/200217:09:33:880-slot0-_PAC-debug-M00:PCS-PACCurrentState:AsAckAuthMsgType:PS_ACKACK_AUTH;PrtlUserIP:*10/21/200217:09:33:880-slot0-_PAC-debug-M00:,0,65,用户上线：portal协议,PAC-CCCurrentState:AsAckAuthMsgType:PAC_PORTAL_UP;PrtlUserIP:PrtlUserCID:11.0.12;PrtlUserPAID:1e72a9d8/PAC通知AAA模块进行Radius计费：*10/21/200217:09:33:880-slot0-_PAC-debug-M00:PAC-AAACurrentState:AsAckAuthMsgType:PAC_REQ_ACCT;PrtlUserIP:PrtlUserCID:11.0.12;PrtlUserPAID:1e72a9d8,0,66,code=4id=36length=127/Accounting-Request8bcfb6c62650fe3e58e8c0a221c34097*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(40)(Acct-Status-Type):1/start*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(4)(NAS-IP-Address):54*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(32)(NAS-Identifier):ESR8850*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(8)(Framed-IP-Address):*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1.201,用户上线：Radius+1.0协议（code4）,0,67,*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(5)(NAS-Port):0*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(61)(NAS-Port-Type):15*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(44)(Acct-Session-Id):10211709330000000028*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(45)(Acct-Authentic):1*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(193)(Acct-Timestamp):6451*10/21/200217:09:34:010-slot0-AAA-debug-Packet:attribute(41)(Acct-Delay-Time):0,用户上线：Radius+1.0协议（code4）,0,68,code=5id=36length=26/Accounting-Response79f439c1d3dc4aa24585218e41bb*10/21/200217:09:34:100-slot0-AAA-debug-Packet:attribute(80)(Remanent-Volume):4294967295,用户上线：Radius+1.0协议（code5）,0,69,用户下线：portal协议,*10/21/200217:09:42:610-slot0-_PCS-debug-M00:RecvPacketFromPortalServer(HEX):0105000000280000c0a8000500000000/REQ_LOGOUT*10/21/200217:09:42:610-slot0-_PAC-debug-M00:PCS-PACCurrentState:AsConnMsgType:PS_REQ_LOGOUT;PrtlUserIP:*10/21/200217:09:42:620-slot0-_PAC-debug-M00:PAC-AAACurrentState:AsConnMsgType:PAC_STOP_ACCT;PrtlUserIP:PrtlUserCID:11.0.12;PrtlUserPAID:1e72a9d8,0,70,用户下线：portal协议,*10/21/200217:09:42:620-slot0-_PAC-debug-M00:PAC-CCCurrentState:AsConnMsgType:PAC_PORTAL_DOWN;PrtlUserIP:PrtlUserCID:11.0.12;PrtlUserPAID:1e72a9d8*10/21/200217:09:42:620-slot0-_PAC-debug-M00:PAC-PCSCurrentState:AsConnMsgType:PAC_LOGOUT_SUCC;PrtlUserIP:,0,71,code=4id=37length=193/Accounting-Request3366fa111befd4553b3ada0243b6a1*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(40)(Acct-Status-Type):2/stop*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(4)(NAS-IP-Address):54*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(32)(NAS-Identifier):ESR8850*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(8)(Framed-IP-Address):*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1.201*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(5)(NAS-Port):0,用户下线：Radius+1.0协议（code4）,0,72,*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(61)(NAS-Port-Type):15*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(44)(Acct-Session-Id):10211709330000000028*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(45)(Acct-Authentic):1*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(193)(Acct-Timestamp):6460*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(41)(Acct-Delay-Time):1*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(49)(Acct-Terminate-Cause):1*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(111)(Input-Kilobytes-Before-Tariff-Switch):7*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(115)(Input-Kilobytes-After-Tariff-Switch):7,用户下线：Radius+1.0协议（code4）,0,73,*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(112)(Output-Kilobytes-Before-Tariff-Switch):16*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(116)(Output-Kilobytes-After-Tariff-Switch):16*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(113)(Input-Packets-Before-Tariff-Switch):77*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(117)(Input-Packets-After-Tariff-Switch):77*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(114)(Output-Packets-Before-Tariff-Switch):61*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(118)(Output-Packets-After-Tariff-Switch):61*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(72)(Time-Befor-Tariff-Switch):9*10/21/200217:09:42:770-slot0-AAA-debug-Packet:attribute(73)(Time-After-Tariff-Switch):9,用户下线：Radius+1.0协议（code4）,0,74,code=5id=37length=26/Accounting-Response75f0bb512528709a747b2d15b617ba60*10/21/200217:09:42:860-slot0-AAA-debug-Packet:attribute(80)(Remanent-Volume):4294967295,用户下线：Radius+1.0协议（code5）,0,75,实例二：PSCPradius+1.1,VLan用户上网流程（2）：PSCPRadius1.1,0,76,VLan用户上线流程：PSCPRadius1.1,0,77,8850数据配置：radius-serverprotocol-typeradius+itellin/使用Radius+1.1（其它配置同实例一）Portal-Server应该选择PSCP，运行在Portal-Server和iSCP之间，与8850无关，因此8850上应该无相应的Portal调试信息；8850和iTELLIN所使用的Radius协议类型应一致。,8850数据配置,0,78,用户PC通过DHCP获取IP地址；打开IE，输入任意IP地址，被强制到“00”的Portal页面上；在Portal页面上输入正确的用户名和密码，按“确定”登录；,用户登录界面,0,79,/Session-Control(Trigger-Request)报文，触发BAS开始认证计费code=20id=0length=62/Session-Control，Radius+1.1新增报文ddda8ad475fb7f4312da44ca3059f66*10/21/200217:37:13:340-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1*10/21/200217:37:13:340-slot0-AAA-debug-Packet:attribute(8)(Framed-IP-Address):/据此找到对应的连接*10/21/200217:37:13:340-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 x140 x60 x00 x00 x00 x10 x180 x60 x00 x00 x00 x0*10/21/200217:37:13:340-slot0-AAA-debug-Packet:VendorSpecificID:2011*10/21/200217:37:13:340-slot0-AAA-debug-Packet:VendorSpecattribute(2620)(Command):1/Trigger-Request*10/21/200217:37:13:340-slot0-AAA-debug-Packet:VendorSpecattribute(2624)(Control-Identifier):0,用户上线：Radius+1.1协议（code20）,0,80,code=1id=47length=133/Access-Request0057730045d5003647008d4*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(2)(User-Password):0 x850 x5a0 xfb0 x190 x870 x160 xd90 x290 xfc0 x290 xd50 x830 x9b0 xeb0 x840 xd*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(4)(NAS-IP-Address):54*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(32)(NAS-Identifier):ESR8850*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(61)(NAS-Port-Type):15/以太网,用户上线：Radius+1.1协议（code1）,0,81,*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(87)(Nas-Port-Id):ESR8850-11000000010vlan/Portal-Server上需配置对应节点信息*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 x110 x60 x690 x730 x700 x310 x1a0 x60 x00 x800 x00 x0*10/21/200217:37:13:370-slot0-AAA-debug-Packet:VendorSpecificID:2011*10/21/200217:37:13:370-slot0-AAA-debug-Packet:VendorSpecattribute(2617)(ISP-ID):1769173041*10/21/200217:37:13:370-slot0-AAA-debug-Packet:VendorSpecattribute(2626)(Connect-ID):8388608*10/21/200217:37:13:370-slot0-AAA-debug-Packet:attribute(8)(Framed-IP-Address):,用户上线：Radius+1.1协议（code1）,0,82,code=2id=47length=89/Access-Accept50fea8ad3fea5c15bdce728465d8c669*10/21/200217:37:13:460-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:37:13:460-slot0-AAA-debug-Packet:attribute(85)(Realtime-Interval):900/时间间隔*10/21/200217:37:13:460-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 x10 x60 x00 x980 x800 x00 x20 x60 x00 x980 x800 x00 x30 x60 x00 x980 x800 x00 x40 x60 x00 x980 x800 x00 x50 x60 x00 x980 x800 x00 x60 x60 x00 x980 x800 x00 x110 x90 x740 x650 x730 x740 x320 x300 x310 x1a0 x60 x00 x800 x00 x0*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecificID:2011,用户上线：Radius+1.1协议（code2）,0,83,*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2601)(Input-Peak-Rate):9994240*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2602)(Input-Average-Rate):9994240*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2603)(Input-Basic-Rate):9994240*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2604)(Output-Peak-Rate):9994240*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2605)(Output-Average-Rate):9994240*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2606)(Output-Basic-Rate):9994240*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2617)(ISP-ID):test201*10/21/200217:37:13:460-slot0-AAA-debug-Packet:VendorSpecattribute(2626)(Connect-ID):8388608,用户上线：Radius+1.1协议（code2）,0,84,code=4id=48length=135/Accounting-Requestf76ae33de5bbf3b6744b9a29f8d3826d*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(40)(Acct-Status-Type):1/start*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(4)(NAS-IP-Address):54*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(32)(NAS-Identifier):ESR8850*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(8)(Framed-IP-Address):*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(5)(NAS-Port):0,用户上线：Radius+1.1协议（code4）,0,85,*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(61)(NAS-Port-Type):15*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(44)(Acct-Session-Id):10211737130000000032*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(45)(Acct-Authentic):1*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(193)(Acct-Timestamp):8110*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(41)(Acct-Delay-Time):0*10/21/200217:37:13:490-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 x1a0 x60 x00 x800 x00 x0*10/21/200217:37:13:490-slot0-AAA-debug-Packet:VendorSpecificID:2011*10/21/200217:37:13:490-slot0-AAA-debug-Packet:VendorSpecattribute(2626)(Connect-ID):8388608,用户上线：Radius+1.1协议（code4）,0,86,code=5id=48length=60/Accounting-Response179d1ee7e84b74b94753f1bb4fc28e24*10/21/200217:37:13:580-slot0-AAA-debug-Packet:attribute(44)(Acct-Session-Id):10211737130000000032*10/21/200217:37:13:580-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 xf0 x60 xff0 xff0 xff0 xff0 x1a0 x60 x00 x800 x00 x0*10/21/200217:37:13:580-slot0-AAA-debug-Packet:VendorSpecificID:2011*10/21/200217:37:13:580-slot0-AAA-debug-Packet:VendorSpecattribute(2615)(RemanentVolumn):4294967295*10/21/200217:37:13:680-slot0-AAA-debug-Packet:VendorSpecattribute(2626)(Connect-ID):8388608,用户上线：Radius+1.1协议（code5）,0,87,/Session-Control(result)报文，对应于Trigger-Request报文code=20id=0length=50/Session-Control573cbbd7328539252b81af53c62ca64b*10/21/200217:37:13:680-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 x190 x60 x00 x00 x00 x00 x180 x60 x00 x00 x00 x00 x140 x60 x00 x00 x00 x40 x1a0 x60 x00 x800 x00 x0*10/21/200217:37:13:680-slot0-AAA-debug-Packet:VendorSpecificID:2011*10/21/200217:37:13:680-slot0-AAA-debug-Packet:VendorSpecattribute(2625)(Result-Code):0/0:打开端口成功*10/21/200217:37:13:680-slot0-AAA-debug-Packet:VendorSpecattribute(2624)(Control-Identifier):0*10/21/200217:37:13:680-slot0-AAA-debug-Packet:VendorSpecattribute(2620)(Command):4/result*10/21/200217:37:13:680-slot0-AAA-debug-Packet:VendorSpecattribute(2626)(Connect-ID):8388608,用户上线：Radius+1.1协议（code20）,0,88,VLan用户下线流程：PSCPRadius1.1,其中，在Session-Control(Terminate)中肯定含有Connect-ID属性，BAS根据此找到对应的连接。,0,89,/Session-Control(Terminate)报文，主动断开用户的连接code=20id=0length=84/Session-Controlce8a208418955659822a109840a195ba*10/21/200217:38:08:660-slot0-AAA-debug-Packet:attribute(44)(Acct-Session-Id):10211737130000000032*10/21/200217:38:08:660-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1*10/21/200217:38:08:660-slot0-AAA-debug-Packet:attribute(26)(Vendor-Specific):0 x00 x00 x70 xdb0 x140 x60 x00 x00 x00 x20 x180 x60 x00 x00 x00 x10 x1a0 x60 x00 x800 x00 x0*10/21/200217:38:08:660-slot0-AAA-debug-Packet:VendorSpecificID:2011*10/21/200217:38:08:660-slot0-AAA-debug-Packet:VendorSpecattribute(2620)(Command):2/Terminate*10/21/200217:38:08:660-slot0-AAA-debug-Packet:VendorSpecattribute(2624)(Control-Identifier):1*10/21/200217:38:08:660-slot0-AAA-debug-Packet:VendorSpecattribute(2626)(Connect-ID):8388608/必需，BAS根据此属性找到对应的连接,用户下线：Radius+1.1协议（code20）,0,90,/计费结束过程code=4id=49length=189/Accounting-Requestf419675e86f7453ba563d4bc4d7a4c*10/21/200217:38:08:810-slot0-AAA-debug-Packet:attribute(40)(Acct-Status-Type):2/stop*10/21/200217:38:08:810-slot0-AAA-debug-Packet:attribute(4)(NAS-IP-Address):54*10/21/200217:38:08:810-slot0-AAA-debug-Packet:attribute(32)(NAS-Identifier):ESR8850*10/21/200217:38:08:810-slot0-AAA-debug-Packet:attribute(8)(Framed-IP-Address):*10/21/200217:38:08:810-slot0-AAA-debug-Packet:attribute(7)(Framed-Protocol):1*10/21/200217:38:08:810-slot0-AAA-debug-Packet:attribute(1)(User-name):kdlhsys6514isp1*10/21/200217:38:08:810-slot0-AAA-debug-Packet: