[c-nsp] RE: Problem with CAR 3.5.4

[Oliver Boehmer (oboehmer)]

Hi,

well, there is not much you can do other than finding out who constantly
tries to authenticate, call up the user and tell him about this.. or you
just ignore it since everything else is fine

	oli

Tihomir Dragas <mailto:tihomir.dragas at telekomcg.com> wrote on Monday,
March 21, 2005 2:00 PM:

> Hi all,
> 
> I saw in (/opt/CSCOar/logs/name_radius_1_log) that radius server
> receive new 
> access-request every 2 sec from NAS.
> 
> Stats from CAR 3.5.4 is:
> 
> --> stats
> 
> Global Statistics for Radius:
> serverStartTime = Sun Mar 20 13:14:45 2005
> serverResetTime = Mon Mar 21 13:33:49 2005
> serverState = Running
> totalPacketsInPool = 1024
> totalPacketsReceived = 37578
> totalPacketsSent = 37474
> totalRequests = 37578
> totalResponses = 37474
> totalAccessRequests = 37474
> totalAccessAccepts = 376
> totalAccessChallenges = 0
> totalAccessRejects = 37098
> totalAccessResponses = 37474
> totalAccountingRequests = 104
> totalAccountingResponses = 0
> totalStatusServerRequests = 0
> totalAscendIPAAllocateRequests = 0
> totalAscendIPAAllocateResponses = 0
> totalAscendIPAReleaseRequests = 0
> totalAscendIPAReleaseResponses = 0
> totalUSRNASRebootRequests = 0
> totalUSRNASRebootResponses = 0
> totalUSRResourceFreeRequests = 0
> totalUSRResourceFreeResponses = 0
> totalUSRQueryResourceRequests = 0
> totalUSRQueryResourceResponses = 0
> totalUSRQueryReclaimRequests = 0
> totalUSRQueryReclaimResponses = 0
> totalPacketsInUse = 0
> totalPacketsDrained = 0
> totalPacketsDropped = 0
> totalPayloadDecryptionFailures = 0
> 
> I have almost 38000 access-requests from yesterday 13:00. What I need
> to do 
> with this to solve this issue (problem)?
> 
> Tiho
> 
> 
> ----- Original Message -----
> From: "Oliver Boehmer (oboehmer)" <oboehmer at cisco.com>
> To: "Tihomir Dragas" <tihomir.dragas at telekomcg.com>;
> <cisco-nsp at puck.nether.net>
> Sent: Monday, March 21, 2005 12:50 PM
> Subject: [c-nsp] RE: Problem with CAR 3.5.4
> 
> 
>> 
>>> 
>>> I have problem with health on CAR 3.5.4:
>>> 
>> 
>>> --> status
>>> 
>>> Server 'Radius' is Running, its health is 3 out of 10
>>> 
>>> What is the problem, and what are the possible consequences?
>> 
>> take a look at "stats" output and check the logfile for errors
>> (/opt/CSCOar/logs/name_radius_1_log)
>> 
>> The following things decrement the server's health:
>> 
>>   the rejection of an Access-Request
>>   configuration errors
>>   running out of memory
>>   errors reading from the network
>>   dropping packets that cannot be read (because the server ran out
>>   of memory) errors writing to the network.
>> 
>> oli
>> 
>> 
>>> 
>>> ----- Original Message -----
>>> From: "Oliver Boehmer (oboehmer)" <oboehmer at cisco.com>
>>> To: "Rob Polland" <rpolland at gmail.com>; <cisco-nsp at puck.nether.net>
>>> Sent: Monday, March 21, 2005 12:25 PM
>>> Subject: RE: [c-nsp] uploading a dictionary to cisco CAR 1.7 radius
>>> 
>>> 
>>>> Rob Polland <> wrote on Monday, March 21, 2005 12:00 PM:
>>>> 
>>>>> Hi all,
>>>>> can any body told me how can i install a new dictionary into unix
>>>>> cisco access registrar 1.7 working on a sun machine and if there
>>>>> is any documents available for that.
>>>> 
>>>> CAR attributes are defined within the /Radius/Advanced/Attribute
>>>> Dictionary/ hierarchy, here you can define/change the attributes
>>>> (see also 
>>>> 
>>
http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cnsar/1_7/users/
>>>> objects.htm#wp1024678)
>>>> 
>>>> I don't know of a script which takes a "regular" "dictionary" file
>>>> and loads it into CAR, but you might be able to write a small
>>>> perl-script which creates the necessary AR commands which then can
>>>> be fed into aregcmd.. 
>>>> 
>>>> oli
>>>> 
>>>> _______________________________________________
>>>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>> 
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/