Overview

A customer reports that one or more users are unable to browse and the sessions are in "Unauthorize" state. This article provides steps to verify if there are issues in AAA Server.

Solution

Check the Transaction logs on the AAA Server.

These are located in a location similar to: /home/dwifi/aaa/translog/log/transaction<date>_<time>.log

Search the specific User(s) the customer provided:

[ 13 11 2022 21:28:59,067 ] User=FC:4A:E9:3A:63:9B,NAS=203.212.193.192,NASID=?????????.????????????,IPAddr=????????????,MAC=??.??.??.?,MSG=Authentication Success,Class=ELITECLASS,21067:156=DOCSIS-Dynamic,21067:125=FC:4A:E9:3A:63:9B,0:89=BB-1673851343,21067:117:3=00297639,21067:117:5=27.4.130.49,Service=AFUP-D100M-U20M,Sess-ID=00297639,SE-TO=86400,ID-TO=1800

In the above example, the session of the user was Authenticated successfully and there were no authentication failures seen.

Check the Active Sessions in AAA GUI

In the AAA GUI Search Active Session for the user:

Notify the customer if no issues are seen.

If there are active sessions seen in GUI the issue could be because of stale sessions. In that case proceed with the steps in Sessions showing in AAA/PCRF but no session in BNG