<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Navin, <div><br></div><div>can you check that your radius server has the same secret key as per the Smartedge configuration. </div><div><br></div><div>Message-authenticator is described in RFC 2869:</div><div><br></div><div><div>Description</div><div><br></div><div> This attribute MAY be used to sign Access-Requests to prevent</div><div> spoofing Access-Requests using CHAP, ARAP or EAP authentication</div><div> methods. It MAY be used in any Access-Request. It MUST be used</div><div> in any Access-Request, Access-Accept, Access-Reject or Access-</div><div> Challenge that includes an EAP-Message attribute.</div><div><br></div><div> A RADIUS Server receiving an Access-Request with a Message-</div><div> Authenticator Attribute present MUST calculate the correct value</div><div> of the Message-Authenticator and silently discard the packet if it</div><div> does not match the value sent.</div><div><br></div><div> A RADIUS Client receiving an Access-Accept, Access-Reject or</div><div> Access-Challenge with a Message-Authenticator Attribute present</div><div> MUST calculate the correct value of the Message-Authenticator and</div><div> silently discard the packet if it does not match the value sent.</div><div><br></div><div>Thanks</div><div>Stefano</div><div><br></div><div><br></div><div><div>On Oct 21, 2010, at 12:23 PM, Navin Nepali wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><table cellspacing="0" cellpadding="0" border="0"><tbody><tr><td valign="top" style="font: inherit;"><div>This high cpu load problem in SE800 is still giving me problem. I have tried everything to control this. To test we have blocked all the PPPoE request (PADI) coming to SE800 but still we can see the cpu is still High. I have collected the AAA log in SE800 during blocking PADI. </div>
<div> </div>
<div>I see following message:</div>
<div>Oct 21 14:39:02: [0002]: [255/22:1:27/6/2/70475]: %AAA-7-RADIUS: aaa_idx 1cc0683b: aaaidx_tree_insert: insert aaa_idx to idx tree for context db_request_type Accounting Update. (adsl5532891) <br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 20 bytes from radius server 192.168.117.16 (1813)<br>Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find matching server 192.168.117.16/1813<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 20 bytes from radius server 192.168.117.16 (1813)<br>Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find matching server 192.168.117.16/1813<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 48 bytes from radius server 192.168.117.16 (1812)<br>Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find matching server 192.168.117.16/1812<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_response_sanity_check: Message-Authenticator is not
present<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 48 bytes from radius server 192.168.117.16 (1812)<br>Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find matching server 192.168.117.16/1812<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_response_sanity_check: Message-Authenticator is not present<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 46 bytes from radius server 192.168.117.16 (1812)<br>Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find matching server 192.168.117.16/1812<br>Oct 21 14:39:02: %AAA-7-RADIUS: rad_response_sanity_check: Message-Authenticator is not present<br>Oct 21 14:39:03: %AAA-7-RADIUS: rad_send, Process radius requests in authen high priority queue</div>
<div> </div>
<div>Can someone tell me what does it mean by "rad_response_sanity_check: Message-Authenticator is not present"</div>
<div> </div>
<div>Anyway i have attached the log with this mail.</div>
<div> </div>
<div>Thanks!</div></td></tr></tbody></table><br>
<span><debugradius.txt></span>_______________________________________________<br>redback-nsp mailing list<br><a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br></blockquote></div><br></div></body></html>