[rbak-nsp] redback-nsp Digest, Vol 35, Issue 3
Ahmad Rifai
ahmad.rifai at gmail.com
Tue Nov 9 04:27:43 EST 2010
Hi Frans, do you have specific configuration in the radius that force the
subscriber to specific context that has no route to anywhere, my company use
free radius, i really apreciate ur help, thx before
@Navin : thx pal, what number r u use to do this throttling, since i dont
know what the effect if the number is to high or too low, for now i have
about 32K subscriber in my radius, and the auth part is about 400 more or
less
here's the capture
[local]BRAS-D3-BDG#sho subs sum
--------------------------------------------------------------------------------
Total=29679
Type Authenticating Active Disconnecting
PPP 0 0 0
PPPoE 369 32447 44
DOT1Q 0 0 0
CLIPs 0 0 0
ATM-B1483 0 0 0
ATM-R1483 0 0 0
Mobile-IP 0 0 0
On Tue, Nov 9, 2010 at 12:00 AM, <redback-nsp-request at puck.nether.net>wrote:
> Send redback-nsp mailing list submissions to
> redback-nsp at puck.nether.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://puck.nether.net/mailman/listinfo/redback-nsp
> or, via email, send a message with subject or body 'help' to
> redback-nsp-request at puck.nether.net
>
> You can reach the person managing the list at
> redback-nsp-owner at puck.nether.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of redback-nsp digest..."
>
>
> Today's Topics:
>
> 1. high aaad load because of automatically redial modem (Ahmad Rifai)
> 2. Re: high aaad load because of automatically redial modem
> (Frans Legdeur)
> 3. Re: high aaad load because of automatically redial modem
> (Navin Nepali)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 8 Nov 2010 13:02:22 +0700
> From: Ahmad Rifai <ahmad.rifai at gmail.com>
> To: redback-nsp at puck.nether.net
> Subject: [rbak-nsp] high aaad load because of automatically redial
> modem
> Message-ID:
> <AANLkTimOxMyJM_vXq3GVjWYF+zUOxJ2SYXmARCExg+HM at mail.gmail.com<AANLkTimOxMyJM_vXq3GVjWYF%2BzUOxJ2SYXmARCExg%2BHM at mail.gmail.com>
> >
> Content-Type: text/plain; charset="iso-8859-1"
>
> hi guys, i have issue about redback se-800,
> when each first date of the month we have enourmous fail authentication
> issue and its because we have blocked bad debt customer (the customer
> didn't
> pay for their last month usage so we blocked them with a flag in radius),
> but since the customer using pppoe connection and their modem is
> automatically redial, they keep authenticating and bras keep rejecting.
> This
> situation make the bras aaad process so high (about 60%) and sometimes make
> it halt and collapsed the bras so it cant process anymore request and
> trafic. do you have the solution about this problem ?
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/80daf663/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 2
> Date: Mon, 08 Nov 2010 08:29:56 +0100
> From: Frans Legdeur <frans at falco-networks.com>
> To: Ahmad Rifai <ahmad.rifai at gmail.com>, <redback-nsp at puck.nether.net>
> Subject: Re: [rbak-nsp] high aaad load because of automatically redial
> modem
> Message-ID: <C8FD6585.39573%frans at falco-networks.com<C8FD6585.39573%25frans at falco-networks.com>
> >
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Ahmed,
>
> Why don?t you create a new context for these subscribers that has no route
> out to anywhere.
> With radius you guide that ?non-paying? customer towards this context and
> provide him any IP address from the pool.
> He?s stuck there, if you like you can add a redirct for HTTP towards a
> server which displays the message that he should pay for his use.
>
> Kind regards,
>
>
> Frans.
>
>
>
> From: Ahmad Rifai <ahmad.rifai at gmail.com>
> Date: Mon, 8 Nov 2010 13:02:22 +0700
> To: <redback-nsp at puck.nether.net>
> Subject: [rbak-nsp] high aaad load because of automatically redial modem
>
> hi guys, i have issue about redback se-800,?
> when each first date of the month we have enourmous fail authentication
> issue and its because we have blocked bad debt customer (the customer
> didn't
> pay for their last month usage so we blocked them with a flag in radius),
> but since the customer using pppoe connection and their modem is
> automatically redial, they keep authenticating and bras keep rejecting.
> This
> situation make the bras aaad process so high (about 60%) and sometimes make
> it halt and collapsed the bras so it cant process anymore request and
> trafic. do you have the solution about this problem ?
>
>
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/144f2226/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 3
> Date: Mon, 8 Nov 2010 04:33:04 -0800 (PST)
> From: Navin Nepali <navin_n at yahoo.com>
> To: Ahmad Rifai <ahmad.rifai at gmail.com>, redback-nsp at puck.nether.net
> Subject: Re: [rbak-nsp] high aaad load because of automatically redial
> modem
> Message-ID: <388488.80332.qm at web112711.mail.gq1.yahoo.com>
> Content-Type: text/plain; charset="utf-8"
>
> I had same issue.?My Se800 CPU was always 99%.?I had done PADI/PADR
> throttling since then my cpu dropped to 70%.
> ?
> you can use this command to do throttling:
> ?
>
> pppoe circuit padi/padr per-mac count padi-num allow-time allow-interval
> drop-time drop-interval
> ?
> Thanks
> --- On Mon, 11/8/10, Frans Legdeur <frans at falco-networks.com> wrote:
>
>
> From: Frans Legdeur <frans at falco-networks.com>
> Subject: Re: [rbak-nsp] high aaad load because of automatically redial
> modem
> To: "Ahmad Rifai" <ahmad.rifai at gmail.com>, redback-nsp at puck.nether.net
> Date: Monday, November 8, 2010, 12:59 PM
>
>
> Hi Ahmed,
>
> Why don?t you create a new context for these subscribers that has no route
> out to anywhere.
> With radius you guide that ?non-paying? customer towards this context and
> provide him any IP address from the pool.
> He?s stuck there, if you like you can add a redirct for HTTP towards a
> server which displays the message that he should pay for his use.
>
> Kind regards,
>
>
> Frans.
>
>
>
>
> From: Ahmad Rifai <ahmad.rifai at gmail.com>
> Date: Mon, 8 Nov 2010 13:02:22 +0700
> To: <redback-nsp at puck.nether.net>
> Subject: [rbak-nsp] high aaad load because of automatically redial modem
>
> hi guys, i have issue about redback se-800,?
> when each first date of the month we have enourmous fail authentication
> issue and its because we have blocked bad debt customer (the customer didn't
> pay for their last month usage so we blocked them with a flag in radius),
> but since the customer using pppoe connection and their modem is
> automatically redial, they keep authenticating and bras keep rejecting. This
> situation make the bras aaad process so high (about 60%) and sometimes make
> it halt and collapsed the bras so it cant process anymore request and
> trafic. do you have the solution about this problem ?
>
>
>
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp
>
> -----Inline Attachment Follows-----
>
>
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp
>
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/efdb4cc2/attachment-0001.html
> >
>
> ------------------------------
>
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp
>
>
> End of redback-nsp Digest, Vol 35, Issue 3
> ******************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20101109/41a18d81/attachment.html>
More information about the redback-nsp
mailing list