<HTML>
<HEAD>
<TITLE>Re: [rbak-nsp] Any one using ARADIAL Radius with SE800?</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Are you certain that you are not sending SNMP reauth / RADIUS CoA from your platform to the SE800?<BR>
I notice you have coa and bulk reauth configured.<BR>
<BR>
Can you compare an auth request from a “first time” user (i.e not previously connected) with one of these ones you clam are are arriving whilst the user is still connected? Are any of the attributes different? What does the accounting say at this point? Does it indicate the user is being disconnected/attempting reauthentication at all?<BR>
<BR>
Dave.<BR>
<BR>
<BR>
On 21/08/2010 14:32, "Navin Nepali" <<a href="navin_n@yahoo.com">navin_n@yahoo.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Before I was running 6.1.3.6 and just last week i upgraded to 6.1.3.8p3. But the problem is not solved and i am getting high cpu load...mostly consumed by aaad,statd and ism2.<BR>
<BR>
<I>aaa authentication administrator local <BR>
aaa authentication subscriber local radius <BR>
aaa accounting subscriber radius<BR>
aaa update subscriber 10<BR>
aaa accounting suppress-acct-on-fail<BR>
aaa reauthorization bulk radius<BR>
radius accounting server 192.168.117.16 encrypted-key 26BCF5890291563D<BR>
radius coa server 192.168.117.16 encrypted-key 26BCF5890291563D port 3799<BR>
</I> <BR>
<I>radius server 192.168.117.16 encrypted-key 26BCF5890291563D<BR>
radius attribute nas-ip-address interface aradial<BR>
radius attribute calling-station-id format hostname agent-circuit-id agent-remote-id <BR>
radius attribute calling-station-id separator /<BR>
radius attribute acct-session-id access-request <BR>
radius algorithm round-robin<BR>
radius accounting algorithm round-robin<BR>
radius strip-domain <BR>
</I> <BR>
as per Redback, they asked me to remove " aaa authentication subscriber local radius " and put "aaa authentication subscriber radius"... i have done it but still no improvement. <BR>
<BR>
Users are already connected but still the authen request is sent by se800 and these authen request are rejected by Radius and keeping the process busy.<BR>
<BR>
That's why i want to make sure that if it's the problem of radius or se800 version itself.<BR>
<BR>
<BR>
--- On <B>Sat, 8/21/10, David Freedman <I><<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a>></I></B> wrote:<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
From: David Freedman <<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a>><BR>
Subject: Re: [rbak-nsp] Any one using ARADIAL Radius with SE800?<BR>
To: "Navin Nepali" <<a href="navin_n@yahoo.com">navin_n@yahoo.com</a>>, <a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
Date: Saturday, August 21, 2010, 6:53 PM<BR>
<BR>
Do you have any form of re-authentication configured? (i.e custom/NetOP EMS?)<BR>
<BR>
Are you sure user is connected when this auth request arrives? (i.e did you confirm lack of accounting STOP before the request is dispatched?)<BR>
<BR>
How long have you been running this release? Have you seen this before?<BR>
<BR>
.<BR>
<BR>
On 21/08/2010 14:17, "Navin Nepali" <<a href="navin_n@yahoo.com">navin_n@yahoo.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Is there any bug relating to the Radius Authentication with the SEOS version 6.1.3.8p3?<BR>
<BR>
I am having strange problem. even the user is already connected but still the SE800 is sending the authentication request to the Radius server. Because of this the CPU load is very high in my case.<BR>
<BR>
<BR>
<BR>
--- On <B>Sat, 8/21/10, David Freedman <I><<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a>></I></B> wrote:<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
From: David Freedman <<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a>><BR>
Subject: Re: [rbak-nsp] Any one using ARADIAL Radius with SE800?<BR>
To: "Navin Nepali" <<a href="navin_n@yahoo.com">navin_n@yahoo.com</a>>, <a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
Date: Saturday, August 21, 2010, 6:39 PM<BR>
<BR>
Navin,<BR>
<BR>
The attributes you issue would be a combination of IETF and Redback “Vendor Specific” attributes as defined in the appendix of the appropriate SEOS manual section. <BR>
<BR>
The vendor of the Radius software should have nothing do with the content of the attributes, just how you would issue them.<BR>
<BR>
What exactly are you trying to achieve?<BR>
<BR>
David.<BR>
<BR>
<BR>
On 21/08/2010 14:04, "Navin Nepali" <<a href="navin_n@yahoo.com">navin_n@yahoo.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>hello! <BR>
Anyone using ARADIAL Radius system with SE800?..if anyone using it...then can you provide me the Radius Attributes.<BR>
<BR>
Thanks<BR>
<BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT><SPAN STYLE='font-size:11pt'><FONT FACE="Consolas, Courier New, Courier">_______________________________________________<BR>
redback-nsp mailing list<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Consolas, Courier New, Courier"><BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial">--<BR>
<BR>
David Freedman<BR>
Group Network Engineering<BR>
<BR>
<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a><BR>
Tel +44 (0) 20 7685 8000<BR>
<BR>
Claranet Group<BR>
21 Southampton Row<BR>
London - WC1B 5HA - UK<BR>
<a href="http://www.claranet.com">http://www.claranet.com</a> <<a href="http://www.claranet.com/">http://www.claranet.com/</a>> <<a href="http://www.claranet.com/">http://www.claranet.com/</a>> <BR>
<BR>
Company Registration: 3152737 - Place of registration: England<BR>
<BR>
All the information contained within this electronic message from Claranet Ltd is covered by the disclaimer at <a href="http://www.claranet.co.uk/disclaimer">http://www.claranet.co.uk/disclaimer</a> <BR>
<BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
<BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
--<BR>
<BR>
David Freedman<BR>
Group Network Engineering<BR>
<BR>
<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a><BR>
Tel +44 (0) 20 7685 8000<BR>
<BR>
Claranet Group<BR>
21 Southampton Row<BR>
London - WC1B 5HA - UK<BR>
<a href="http://www.claranet.com">http://www.claranet.com</a> <<a href="http://www.claranet.com/">http://www.claranet.com/</a>> <BR>
<BR>
Company Registration: 3152737 - Place of registration: England<BR>
<BR>
All the information contained within this electronic message from Claranet Ltd is covered by the disclaimer at <a href="http://www.claranet.co.uk/disclaimer">http://www.claranet.co.uk/disclaimer</a> <BR>
<BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
<BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
--<BR>
<BR>
David Freedman<BR>
Group Network Engineering<BR>
<BR>
<a href="david.freedman@uk.clara.net">david.freedman@uk.clara.net</a><BR>
Tel +44 (0) 20 7685 8000<BR>
<BR>
Claranet Group<BR>
21 Southampton Row<BR>
London - WC1B 5HA - UK<BR>
<a href="http://www.claranet.com">http://www.claranet.com</a> <BR>
<BR>
Company Registration: 3152737 - Place of registration: England<BR>
<BR>
All the information contained within this electronic message from Claranet Ltd is covered by the disclaimer at <a href="http://www.claranet.co.uk/disclaimer">http://www.claranet.co.uk/disclaimer</a> <BR>
<BR>
</FONT></SPAN>
</BODY>
</HTML>