Hi Frans, do you have specific configuration in the radius that force the subscriber to specific context that has no route to anywhere, my company use free radius, i really apreciate ur help, thx before<div><br></div><div>
@Navin : thx pal, what number r u use to do this throttling, since i dont know what the effect if the number is to high or too low, for now i have about 32K subscriber in my radius, and the auth part is about 400 more or less</div>
<div><br></div><div>here's the capture</div><div><br></div><div><div>[local]BRAS-D3-BDG#sho subs sum</div><div>--------------------------------------------------------------------------------</div><div>Total=29679</div>
<div><br></div><div>Type Authenticating Active Disconnecting</div><div>PPP 0 0 0</div><div>PPPoE 369 32447 44</div>
<div>DOT1Q 0 0 0</div><div>CLIPs 0 0 0</div><div>ATM-B1483 0 0 0</div>
<div>ATM-R1483 0 0 0</div><div>Mobile-IP 0 0 0</div><br><div class="gmail_quote">On Tue, Nov 9, 2010 at 12:00 AM, <span dir="ltr"><<a href="mailto:redback-nsp-request@puck.nether.net">redback-nsp-request@puck.nether.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Send redback-nsp mailing list submissions to<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:redback-nsp-request@puck.nether.net">redback-nsp-request@puck.nether.net</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:redback-nsp-owner@puck.nether.net">redback-nsp-owner@puck.nether.net</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of redback-nsp digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. high aaad load because of automatically redial modem (Ahmad Rifai)<br>
2. Re: high aaad load because of automatically redial modem<br>
(Frans Legdeur)<br>
3. Re: high aaad load because of automatically redial modem<br>
(Navin Nepali)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Mon, 8 Nov 2010 13:02:22 +0700<br>
From: Ahmad Rifai <<a href="mailto:ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><br>
To: <a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
Subject: [rbak-nsp] high aaad load because of automatically redial<br>
modem<br>
Message-ID:<br>
<<a href="mailto:AANLkTimOxMyJM_vXq3GVjWYF%2BzUOxJ2SYXmARCExg%2BHM@mail.gmail.com">AANLkTimOxMyJM_vXq3GVjWYF+zUOxJ2SYXmARCExg+HM@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
hi guys, i have issue about redback se-800,<br>
when each first date of the month we have enourmous fail authentication<br>
issue and its because we have blocked bad debt customer (the customer didn't<br>
pay for their last month usage so we blocked them with a flag in radius),<br>
but since the customer using pppoe connection and their modem is<br>
automatically redial, they keep authenticating and bras keep rejecting. This<br>
situation make the bras aaad process so high (about 60%) and sometimes make<br>
it halt and collapsed the bras so it cant process anymore request and<br>
trafic. do you have the solution about this problem ?<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/80daf663/attachment-0001.html" target="_blank">https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/80daf663/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Mon, 08 Nov 2010 08:29:56 +0100<br>
From: Frans Legdeur <<a href="mailto:frans@falco-networks.com">frans@falco-networks.com</a>><br>
To: Ahmad Rifai <<a href="mailto:ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>>, <<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><br>
Subject: Re: [rbak-nsp] high aaad load because of automatically redial<br>
modem<br>
Message-ID: <<a href="mailto:C8FD6585.39573%25frans@falco-networks.com">C8FD6585.39573%frans@falco-networks.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Hi Ahmed,<br>
<br>
Why don?t you create a new context for these subscribers that has no route<br>
out to anywhere.<br>
With radius you guide that ?non-paying? customer towards this context and<br>
provide him any IP address from the pool.<br>
He?s stuck there, if you like you can add a redirct for HTTP towards a<br>
server which displays the message that he should pay for his use.<br>
<br>
Kind regards,<br>
<br>
<br>
Frans.<br>
<br>
<br>
<br>
From: Ahmad Rifai <<a href="mailto:ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><br>
Date: Mon, 8 Nov 2010 13:02:22 +0700<br>
To: <<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><br>
Subject: [rbak-nsp] high aaad load because of automatically redial modem<br>
<br>
hi guys, i have issue about redback se-800,?<br>
when each first date of the month we have enourmous fail authentication<br>
issue and its because we have blocked bad debt customer (the customer didn't<br>
pay for their last month usage so we blocked them with a flag in radius),<br>
but since the customer using pppoe connection and their modem is<br>
automatically redial, they keep authenticating and bras keep rejecting. This<br>
situation make the bras aaad process so high (about 60%) and sometimes make<br>
it halt and collapsed the bras so it cant process anymore request and<br>
trafic. do you have the solution about this problem ?<br>
<br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/144f2226/attachment-0001.html" target="_blank">https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/144f2226/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Mon, 8 Nov 2010 04:33:04 -0800 (PST)<br>
From: Navin Nepali <<a href="mailto:navin_n@yahoo.com">navin_n@yahoo.com</a>><br>
To: Ahmad Rifai <<a href="mailto:ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>>, <a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
Subject: Re: [rbak-nsp] high aaad load because of automatically redial<br>
modem<br>
Message-ID: <<a href="mailto:388488.80332.qm@web112711.mail.gq1.yahoo.com">388488.80332.qm@web112711.mail.gq1.yahoo.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
I had same issue.?My Se800 CPU was always 99%.?I had done PADI/PADR throttling since then my cpu dropped to 70%.<br>
?<br>
you can use this command to do throttling:<br>
?<br>
<br>
pppoe circuit padi/padr per-mac count padi-num allow-time allow-interval drop-time drop-interval<br>
?<br>
Thanks<br>
--- On Mon, 11/8/10, Frans Legdeur <<a href="mailto:frans@falco-networks.com">frans@falco-networks.com</a>> wrote:<br>
<br>
<br>
From: Frans Legdeur <<a href="mailto:frans@falco-networks.com">frans@falco-networks.com</a>><br>
Subject: Re: [rbak-nsp] high aaad load because of automatically redial modem<br>
To: "Ahmad Rifai" <<a href="mailto:ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>>, <a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
Date: Monday, November 8, 2010, 12:59 PM<br>
<br>
<br>
Hi Ahmed,<br>
<br>
Why don?t you create a new context for these subscribers that has no route out to anywhere.<br>
With radius you guide that ?non-paying? customer towards this context and provide him any IP address from the pool.<br>
He?s stuck there, if you like you can add a redirct for HTTP towards a server which displays the message that he should pay for his use.<br>
<br>
Kind regards,<br>
<br>
<br>
Frans.<br>
<br>
<br>
<br>
<br>
From: Ahmad Rifai <<a href="mailto:ahmad.rifai@gmail.com">ahmad.rifai@gmail.com</a>><br>
Date: Mon, 8 Nov 2010 13:02:22 +0700<br>
To: <<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a>><br>
Subject: [rbak-nsp] high aaad load because of automatically redial modem<br>
<br>
hi guys, i have issue about redback se-800,?<br>
when each first date of the month we have enourmous fail authentication issue and its because we have blocked bad debt customer (the customer didn't pay for their last month usage so we blocked them with a flag in radius), but since the customer using pppoe connection and their modem is automatically redial, they keep authenticating and bras keep rejecting. This situation make the bras aaad process so high (about 60%) and sometimes make it halt and collapsed the bras so it cant process anymore request and trafic. do you have the solution about this problem ?<br>
<br>
<br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
<br>
-----Inline Attachment Follows-----<br>
<br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
<br>
<br>
<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/efdb4cc2/attachment-0001.html" target="_blank">https://puck.nether.net/pipermail/redback-nsp/attachments/20101108/efdb4cc2/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
<br>
<br>
End of redback-nsp Digest, Vol 35, Issue 3<br>
******************************************<br>
</blockquote></div><br></div>