<HTML>
<HEAD>
<TITLE>Re: [rbak-nsp] high aaad load because of automatically redial modem</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Hi Ahmed,<BR>
<BR>
To move subscribers to the other context might not be necessary, but it’s the easiest way:<BR>
Radius would normally reply:<BR>
<BR>
Request: John@ISP1 Password = “letmein”<BR>
Reply: Service-Type = Framed-User,<BR>
Framed-IP-Address = 80.85.34.55,<BR>
Framed-IP-Netmask = 255.255.255.255,<BR>
RB-Context-Name = “INTERNET”<BR>
<BR>
Now, this subscriber doesn’t pay for his connection, so lets put him somewhere else:<BR>
<BR>
Request: John@ISP1 Password = “letmein”<BR>
Reply: Service-Type = Framed-User,<BR>
Framed-IP-Address = 80.85.34.55,<BR>
Framed-IP-Netmask = 255.255.255.255,<BR>
RB-Context-Name = “BLACKHOLE”<BR>
<BR>
You can have the same subscriber interface at context “BLACKHOLE” as on context “INTERNET”, the difference between them is the fact that context “BLAKHOLE” is going nowhere, it holds only one interface with NO route out! (Unless if you connect a web server with catch all capabilities.) Be aware that you have to lookup the Context-Name VSA in the dictionary.redback under free-radius for the correct spelling!<BR>
<BR>
The radius configuration is not the issue, as you could see, it only needs this RB-Context-Name to be set. <BR>
here is what the radius setup “should” look like, to my humble opinion.<BR>
<BR>
Radius is nothing than a mediator between the requestor (ie. Redback) and the database (ie. Text file or any sql like db)<BR>
So if this context name is part of the reply items, it could come from the database.<BR>
If not, you could have set this by default, so you need an override meganism , that will set this when subscriber are in a need to be set apart.<BR>
<BR>
Let me know if this is helping you, if not or not enough, provide me your free-radius configuration file so that we could dig deeper.<BR>
<BR>
<BR>
Kind regards,<BR>
<BR>
<BR>
Frans.<BR>
<BR>
<BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"><B>From: </B>Ahmad Rifai <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><BR>
<B>Date: </B>Tue, 9 Nov 2010 16:27:43 +0700<BR>
<B>To: </B><<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><BR>
<B>Subject: </B>Re: [rbak-nsp] redback-nsp Digest, Vol 35, Issue 3<BR>
<BR>
Hi Frans, do you have specific configuration in the radius that force the subscriber to specific context that has no route to anywhere, my company use free radius, i really apreciate ur help, thx before<BR>
<BR>
@Navin : thx pal, what number r u use to do this throttling, since i dont know what the effect if the number is to high or too low, for now i have about 32K subscriber in my radius, and the auth part is about 400 more or less<BR>
<BR>
here's the capture<BR>
<BR>
[local]BRAS-D3-BDG#sho subs sum<BR>
--------------------------------------------------------------------------------<BR>
Total=29679<BR>
<BR>
Type Authenticating Active Disconnecting<BR>
PPP 0 0 0<BR>
PPPoE 369 32447 44<BR>
DOT1Q 0 0 0<BR>
CLIPs 0 0 0<BR>
ATM-B1483 0 0 0<BR>
ATM-R1483 0 0 0<BR>
Mobile-IP 0 0 0<BR>
<BR>
On Tue, Nov 9, 2010 at 12:00 AM, <<a href="redback-nsp-request@puck.nether.net">redback-nsp-request@puck.nether.net</a>> wrote:<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Send redback-nsp mailing list submissions to<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<BR>
To subscribe or unsubscribe via the World Wide Web, visit<BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
or, via email, send a message with subject or body 'help' to<BR>
<a href="redback-nsp-request@puck.nether.net">redback-nsp-request@puck.nether.net</a><BR>
<BR>
You can reach the person managing the list at<BR>
<a href="redback-nsp-owner@puck.nether.net">redback-nsp-owner@puck.nether.net</a><BR>
<BR>
When replying, please edit your Subject line so it is more specific<BR>
than "Re: Contents of redback-nsp digest..."<BR>
<BR>
<BR>
Today's Topics:<BR>
<BR>
1. high aaad load because of automatically redial modem (Ahmad Rifai)<BR>
2. Re: high aaad load because of automatically redial modem<BR>
(Frans Legdeur)<BR>
3. Re: high aaad load because of automatically redial modem<BR>
(Navin Nepali)<BR>
<BR>
<BR>
----------------------------------------------------------------------<BR>
<BR>
Message: 1<BR>
Date: Mon, 8 Nov 2010 13:02:22 +0700<BR>
From: Ahmad Rifai <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><BR>
To: <a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
Subject: [rbak-nsp] high aaad load because of automatically redial<BR>
modem<BR>
Message-ID:<BR>
<<a href="AANLkTimOxMyJM_vXq3GVjWYF+zUOxJ2SYXmARCExg+HM@mail.gmail.com">AANLkTimOxMyJM_vXq3GVjWYF+zUOxJ2SYXmARCExg+HM@mail.gmail.com</a> <<a href="mailto:AANLkTimOxMyJM_vXq3GVjWYF%2BzUOxJ2SYXmARCExg%2BHM@mail.gmail.com">mailto:AANLkTimOxMyJM_vXq3GVjWYF%2BzUOxJ2SYXmARCExg%2BHM@mail.gmail.com</a>> ><BR>
Content-Type: text/plain; charset="iso-8859-1"<BR>
<BR>
hi guys, i have issue about redback se-800,<BR>
when each first date of the month we have enourmous fail authentication<BR>
issue and its because we have blocked bad debt customer (the customer didn't<BR>
pay for their last month usage so we blocked them with a flag in radius),<BR>
but since the customer using pppoe connection and their modem is<BR>
automatically redial, they keep authenticating and bras keep rejecting. This<BR>
situation make the bras aaad process so high (about 60%) and sometimes make<BR>
it halt and collapsed the bras so it cant process anymore request and<BR>
trafic. do you have the solution about this problem ?<BR>
-------------- next part --------------<BR>
An HTML attachment was scrubbed...<BR>
URL: <<a href="https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/80daf663/attachment-0001.html">https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/80daf663/attachment-0001.html</a>><BR>
<BR>
------------------------------<BR>
<BR>
Message: 2<BR>
Date: Mon, 08 Nov 2010 08:29:56 +0100<BR>
From: Frans Legdeur <<a href="frans@falco-networks.com">frans@falco-networks.com</a>><BR>
To: Ahmad Rifai <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>>, <<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><BR>
Subject: Re: [rbak-nsp] high aaad load because of automatically redial<BR>
modem<BR>
Message-ID: <<a href="C8FD6585.39573%frans@falco-networks.com">C8FD6585.39573%frans@falco-networks.com</a> <<a href="mailto:C8FD6585.39573%25frans@falco-networks.com">mailto:C8FD6585.39573%25frans@falco-networks.com</a>> ><BR>
Content-Type: text/plain; charset="iso-8859-1"<BR>
<BR>
Hi Ahmed,<BR>
<BR>
Why don?t you create a new context for these subscribers that has no route<BR>
out to anywhere.<BR>
With radius you guide that ?non-paying? customer towards this context and<BR>
provide him any IP address from the pool.<BR>
He?s stuck there, if you like you can add a redirct for HTTP towards a<BR>
server which displays the message that he should pay for his use.<BR>
<BR>
Kind regards,<BR>
<BR>
<BR>
Frans.<BR>
<BR>
<BR>
<BR>
From: Ahmad Rifai <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><BR>
Date: Mon, 8 Nov 2010 13:02:22 +0700<BR>
To: <<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><BR>
Subject: [rbak-nsp] high aaad load because of automatically redial modem<BR>
<BR>
hi guys, i have issue about redback se-800,?<BR>
when each first date of the month we have enourmous fail authentication<BR>
issue and its because we have blocked bad debt customer (the customer didn't<BR>
pay for their last month usage so we blocked them with a flag in radius),<BR>
but since the customer using pppoe connection and their modem is<BR>
automatically redial, they keep authenticating and bras keep rejecting. This<BR>
situation make the bras aaad process so high (about 60%) and sometimes make<BR>
it halt and collapsed the bras so it cant process anymore request and<BR>
trafic. do you have the solution about this problem ?<BR>
<BR>
<BR>
_______________________________________________<BR>
redback-nsp mailing list<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
<BR>
-------------- next part --------------<BR>
An HTML attachment was scrubbed...<BR>
URL: <<a href="https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/144f2226/attachment-0001.html">https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/144f2226/attachment-0001.html</a>><BR>
<BR>
------------------------------<BR>
<BR>
Message: 3<BR>
Date: Mon, 8 Nov 2010 04:33:04 -0800 (PST)<BR>
From: Navin Nepali <<a href="navin_n@yahoo.com">navin_n@yahoo.com</a>><BR>
To: Ahmad Rifai <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>>, <a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
Subject: Re: [rbak-nsp] high aaad load because of automatically redial<BR>
modem<BR>
Message-ID: <<a href="388488.80332.qm@web112711.mail.gq1.yahoo.com">388488.80332.qm@web112711.mail.gq1.yahoo.com</a>><BR>
Content-Type: text/plain; charset="utf-8"<BR>
<BR>
I had same issue.?My Se800 CPU was always 99%.?I had done PADI/PADR throttling since then my cpu dropped to 70%.<BR>
?<BR>
you can use this command to do throttling:<BR>
?<BR>
<BR>
pppoe circuit padi/padr per-mac count padi-num allow-time allow-interval drop-time drop-interval<BR>
?<BR>
Thanks<BR>
--- On Mon, 11/8/10, Frans Legdeur <<a href="frans@falco-networks.com">frans@falco-networks.com</a>> wrote:<BR>
<BR>
<BR>
From: Frans Legdeur <<a href="frans@falco-networks.com">frans@falco-networks.com</a>><BR>
Subject: Re: [rbak-nsp] high aaad load because of automatically redial modem<BR>
To: "Ahmad Rifai" <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>>, <a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
Date: Monday, November 8, 2010, 12:59 PM<BR>
<BR>
<BR>
Hi Ahmed,<BR>
<BR>
Why don?t you create a new context for these subscribers that has no route out to anywhere.<BR>
With radius you guide that ?non-paying? customer towards this context and provide him any IP address from the pool.<BR>
He?s stuck there, if you like you can add a redirct for HTTP towards a server which displays the message that he should pay for his use.<BR>
<BR>
Kind regards,<BR>
<BR>
<BR>
Frans.<BR>
<BR>
<BR>
<BR>
<BR>
From: Ahmad Rifai <<a href="ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><BR>
Date: Mon, 8 Nov 2010 13:02:22 +0700<BR>
To: <<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><BR>
Subject: [rbak-nsp] high aaad load because of automatically redial modem<BR>
<BR>
hi guys, i have issue about redback se-800,?<BR>
when each first date of the month we have enourmous fail authentication issue and its because we have blocked bad debt customer (the customer didn't pay for their last month usage so we blocked them with a flag in radius), but since the customer using pppoe connection and their modem is automatically redial, they keep authenticating and bras keep rejecting. This situation make the bras aaad process so high (about 60%) and sometimes make it halt and collapsed the bras so it cant process anymore request and trafic. do you have the solution about this problem ?<BR>
<BR>
<BR>
<BR>
_______________________________________________<BR>
redback-nsp mailing list<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
<BR>
-----Inline Attachment Follows-----<BR>
<BR>
<BR>
_______________________________________________<BR>
redback-nsp mailing list<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
<BR>
<BR>
<BR>
<BR>
-------------- next part --------------<BR>
An HTML attachment was scrubbed...<BR>
URL: <<a href="https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/efdb4cc2/attachment-0001.html">https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/efdb4cc2/attachment-0001.html</a>><BR>
<BR>
------------------------------<BR>
<BR>
_______________________________________________<BR>
redback-nsp mailing list<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
<BR>
<BR>
End of redback-nsp Digest, Vol 35, Issue 3<BR>
******************************************<BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT><FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:12pt'>_______________________________________________<BR>
redback-nsp mailing list<BR>
<a href="redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><BR>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><BR>
</SPAN></FONT>
</BODY>
</HTML>