Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) junk username in RADIUS stop packets

-----BEGIN PGP SIGNED MESSAGE-----


Hi Dale - 

On Sun, 10 Aug 1997, Dale E. Reed Jr. wrote:

> Ascend came up with a not-so wonderful idea.  If the RADIUS accounting
> packet is re-sent five times and still not ack'ed, it will trim the
> packet down from all the goodies it normally would to something with
> only about four attributes, which username is *NOT* one of them trimmed.

Hmmm... I don't understand what you mean here. Do you mean to save space
the record is gutted? If so, I don't understand why the username should
get corrupted. It shouldn't get corrupted in the first place!

> Its difficult to really figure out why.  The first thing I would do is
> up
> your timesouts for auth and accounting to atleast 5, 7-10 can bring it
> down more.  I have found that Ascend's are very "trigger" happy and
> don't always wait the full timeout, and thats the major cause of it.
> They also like to flood requests when they backup, almost in a parallel
> fashion rather than serially, and this can pretty much wipe out most
> RADIUS servers.

We already have the timeouts at 20.

We see a lot of junk packets - even when we're not that busy.

> I am not that familiar with it, but I believe its just sending
> a RADIUS authentication-like request when the user logs outs and
> pre-dates RADIUS accounting.  Its not really used much anymore.

Ah, thank you - I can find no documentation, anywhere about it.

- --
Josh Bailey (mailto:joshb@xtra.co.nz)

Internet Network Specialist                     Voice (DDI): +64-9-355-5923
Telecom Internet Services                       Voice (Mob): +64-25-514-899
Extension: 93423 (Lvl. 4, 120 Mayoral Dve)      Fax:         +64-9-355-5260
Private Bag 92028, Auckland, NZ                 Pager:       +64-26-114-448

PGP public key available at http://www.pgp.net/pgpnet/pks-commands.html

DISCLAIMER: The contents of this message are entirely my own opinion, not
necessarily that of my employer.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQB1AwUBM+4XvPle+GEe9W4hAQErTgL/TyeHnbkM/jJ48ZB5eVep2Y08JPIYUQaw
8UkIOKmtSG0mJ+/g0ssPuNwfN1HViNL4KotDru0tL4+Sci895xuL+tyskbR+f41d
qWHCzVjXWMc1M/ZedHNgH/yoi6yfKAYo
=x+sL
-----END PGP SIGNATURE-----
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: