[c-nsp] RE: Problem with CAR 3.5.4

Yasser Aly yaseraly00 at yahoo.com
Mon Mar 21 08:33:14 EST 2005


Oliver,
 
  I am looking for proper documentation for CAR including examples, description of Cisco AV-Pairs, and so on.  I tried searching Cisco website but didn't get satisfactory results. 
 
Would you kindly point out useful URLs for CAR.
 
Best Regards,
Yasser

"Oliver Boehmer (oboehmer)" <oboehmer at cisco.com> wrote:
Hi,

well, there is not much you can do other than finding out who constantly
tries to authenticate, call up the user and tell him about this.. or you
just ignore it since everything else is fine

oli

Tihomir Dragas wrote on Monday,
March 21, 2005 2:00 PM:

> Hi all,
> 
> I saw in (/opt/CSCOar/logs/name_radius_1_log) that radius server
> receive new 
> access-request every 2 sec from NAS.
> 
> Stats from CAR 3.5.4 is:
> 
> --> stats
> 
> Global Statistics for Radius:
> serverStartTime = Sun Mar 20 13:14:45 2005
> serverResetTime = Mon Mar 21 13:33:49 2005
> serverState = Running
> totalPacketsInPool = 1024
> totalPacketsReceived = 37578
> totalPacketsSent = 37474
> totalRequests = 37578
> totalResponses = 37474
> totalAccessRequests = 37474
> totalAccessAccepts = 376
> totalAccessChallenges = 0
> totalAccessRejects = 37098
> totalAccessResponses = 37474
> totalAccountingRequests = 104
> totalAccountingResponses = 0
> totalStatusServerRequests = 0
> totalAscendIPAAllocateRequests = 0
> totalAscendIPAAllocateResponses = 0
> totalAscendIPAReleaseRequests = 0
> totalAscendIPAReleaseResponses = 0
> totalUSRNASRebootRequests = 0
> totalUSRNASRebootResponses = 0
> totalUSRResourceFreeRequests = 0
> totalUSRResourceFreeResponses = 0
> totalUSRQueryResourceRequests = 0
> totalUSRQueryResourceResponses = 0
> totalUSRQueryReclaimRequests = 0
> totalUSRQueryReclaimResponses = 0
> totalPacketsInUse = 0
> totalPacketsDrained = 0
> totalPacketsDropped = 0
> totalPayloadDecryptionFailures = 0
> 
> I have almost 38000 access-requests from yesterday 13:00. What I need
> to do 
> with this to solve this issue (problem)?
> 
> Tiho
> 
> 
> ----- Original Message -----
> From: "Oliver Boehmer (oboehmer)" 
> To: "Tihomir Dragas" ;
> 
> Sent: Monday, March 21, 2005 12:50 PM
> Subject: [c-nsp] RE: Problem with CAR 3.5.4
> 
> 
>> 
>>> 
>>> I have problem with health on CAR 3.5.4:
>>> 
>> 
>>> --> status
>>> 
>>> Server 'Radius' is Running, its health is 3 out of 10
>>> 
>>> What is the problem, and what are the possible consequences?
>> 
>> take a look at "stats" output and check the logfile for errors
>> (/opt/CSCOar/logs/name_radius_1_log)
>> 
>> The following things decrement the server's health:
>> 
>> the rejection of an Access-Request
>> configuration errors
>> running out of memory
>> errors reading from the network
>> dropping packets that cannot be read (because the server ran out
>> of memory) errors writing to the network.
>> 
>> oli
>> 
>> 
>>> 
>>> ----- Original Message -----
>>> From: "Oliver Boehmer (oboehmer)" 
>>> To: "Rob Polland" ; 
>>> Sent: Monday, March 21, 2005 12:25 PM
>>> Subject: RE: [c-nsp] uploading a dictionary to cisco CAR 1.7 radius
>>> 
>>> 
>>>> Rob Polland <> wrote on Monday, March 21, 2005 12:00 PM:
>>>> 
>>>>> Hi all,
>>>>> can any body told me how can i install a new dictionary into unix
>>>>> cisco access registrar 1.7 working on a sun machine and if there
>>>>> is any documents available for that.
>>>> 
>>>> CAR attributes are defined within the /Radius/Advanced/Attribute
>>>> Dictionary/ hierarchy, here you can define/change the attributes
>>>> (see also 
>>>> 
>>
http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cnsar/1_7/users/
>>>> objects.htm#wp1024678)
>>>> 
>>>> I don't know of a script which takes a "regular" "dictionary" file
>>>> and loads it into CAR, but you might be able to write a small
>>>> perl-script which creates the necessary AR commands which then can
>>>> be fed into aregcmd.. 
>>>> 
>>>> oli
>>>> 
>>>> _______________________________________________
>>>> cisco-nsp mailing list cisco-nsp at puck.nether.net
>>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>> 
>> _______________________________________________
>> cisco-nsp mailing list cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list