Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(ASCEND) Re: LAN security errors
We had the same problem after upgrading our 4048's. We were seeing a LOT
of Lan security errors. What was very strange is the Radius server was
saying OK. We put the old configuration back into the Max's (the ones we
had fsaved before upgrading) and that solved the problem. Hope that might
help.
Ken Rea
> From: "Technical Support" <ascend@colloquium.co.uk>
> Date: Sat, 22 Aug 1998 21:28:44 +0100
> Subject: (ASCEND) LAN security errors
>
> I work for a local ISP, and one of our Ascend servers (a Max 4000) has
> recently developed the following problem. Users dialing in are receiving
> LAN security errors, yet their passwords are definitely being typed in
> correctly. We are using Radius authentication, with two Radius servers.
> On both servers, two copies of radiusd are running, and the users' database
> files are synchronised between both machines.
>
> Does anyone have any idea why this problem has developed, or have any ideas
> about how to solve it ? Any help would be very much appreciated.
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: "Technical Support" <ascend@colloquium.co.uk>
> Date: Sun, 23 Aug 1998 14:12:27 +0100
> Subject: (ASCEND) Re: LAN security errors
>
> Thanks for your advice, everyone - however, this problem just suddenly
> developed a few days ago, and the server had been working fine for about
> five months before that. We send an installation CD-ROM out to our
> customers which automatically sets up their connection without them having
> to check their DUN or Network control panel settings (all Win95 clients),
> and it has all been working with no problems up till now. We have two
> Ascend servers, and the other is fine. The users who are getting these LAN
> security errors on the one server can connect to the other one with the
> exact same settings, username and password with no problems at all.
>
> One thing that may have some bearing on the situation - recently, one of
> our Radius servers was down for a few days, but is now back up. Could it
> be that the absence of one of the Radius servers has somehow confused one
> of our Ascend servers ? The other Ascend is having no problems with
> authentication at all.
>
> Any help/advice will be very much appreciated !
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Jason Nealis <nealis@babylon.erols.com>
> Date: Sun, 23 Aug 1998 09:49:45 -0400 (EDT)
> Subject: Re: (ASCEND) Radius Servers
>
> FYI,
>
> Please remember that Radius is standard UDP, and given standard UDP
> loss you probably will always be switching between the primary and
> secondary radius server. I believe 1 dropped packet will cause the MAX
> to swap.
>
> Jason Nealis
> Director Internet Operations / Network Access
> Erols Internet (An RCN Company)
>
>
> On Sat, 22 Aug 1998 james@wwnet.net wrote:
>
> > Look at Ethernet->Mod Config->Auth and Accounting. Each has an option
> > Auth Reset Timeout and Acct Reset Timeout. This is number of seconds the
> > max will wait before attempting to switch back to the primary radius
> > server. This feature was made available in 6.0.0 I believe.
> >
> > James
> >
> > On Sat, 22 Aug 1998, Bao C. Ha wrote:
> >
> > >
> > > I have two Radius servers: primary and secondary.
> > >
> > > When the primary is down, the Max switches to the secondary. Then,
> > > when the primary is up, why does it still with the secondary? How
> > > do I set it up so that it will always check with the primary one,
> > > before checking with the secondary?
> > >
> > > Appreciate any advices.
> > >
> >
> > ++ Ascend Users Mailing List ++
> > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > To get FAQ'd: <http://www.nealis.net/ascend/faq>
> >
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Jason Nealis <nealis@babylon.erols.com>
> Date: Sun, 23 Aug 1998 09:59:26 -0400 (EDT)
> Subject: (ASCEND) Ascend World in SF?
>
> I got some announcement yesterday for Ascend World, It was dubbed the 1998
> Ascend Users Expo in San Fran in Nov, Anyone planning on going ?
>
> Jason Nealis
> Director Internet Operations / Network Access
> Erols Internet (An RCN Company)
>
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Ken Felix <kfelix@helios.insnet.com>
> Date: Sun, 23 Aug 1998 09:21:15 -0500
> Subject: (ASCEND) FS: Ascend Pipeline 130 FT-DS1/BRI
>
> I have one extra Pipeline 130 for sale. The unit is about 10 months
> old.
>
> serial # 6446458
> software 6.1.7
> DS-1/BRI interfaces
> Have all documentation.
>
> Contact me at kfelix@insnet.com if interested.
>
>
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: =?iso-8859-1?Q?Lars_Marowsky-Br=E9e?= <lmb@pointer.teuto.de>
> Date: Sun, 23 Aug 1998 18:48:24 +0200
> Subject: Re: (ASCEND) LAN security errors
>
> On 1998-08-22T21:28:44,
> Technical Support <ascend@colloquium.co.uk> said:
>
> > I work for a local ISP, and one of our Ascend servers (a Max 4000) has
> > recently developed the following problem. Users dialing in are receiving
> > LAN security errors, yet their passwords are definitely being typed in
> > correctly. We are using Radius authentication, with two Radius servers.
> > On both servers, two copies of radiusd are running, and the users' database
> > files are synchronised between both machines.
>
> We are seeing the same problem, mostly for users with callback, ie we call
> them to initate the dialup. The problem is that the Max does not immediately
> notice that the remote side has rejected the call, and when they dialin, the
> Max still considers them online and gives them a LAN security error.
>
> I still haven't found a solution to this problem.
>
> Could your problem be related to this behaviour, ie the users hanging up and
> dialing in immediately again without the Max noticing that the connection was
> terminated?
>
>
> Sincerely,
> Lars Marowsky-Brée
>
> - --
> Lars Marowsky-Brée
> Systems Management
>
> teuto.net Netzdienste GmbH - DPN Verbund-Partner
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: "Todd A. Blank" <todd@thenap.com>
> Date: Sun, 23 Aug 1998 14:53:58 -0400
> Subject: (ASCEND) TNT Code Rev. 2.1.9...
>
> Is anyone out there using 2.1.9 for the TNT yet? I was just curious.
> It looks like it fixes many issues. I am just looking for anyone's
> experience with it so far.
>
> Thanks for you help,
>
> Todd A. Blank
> Columbus NAP, Inc.
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Derek Vadala <derek@usfca.edu>
> Date: Sun, 23 Aug 1998 15:38:35 -0400
> Subject: Re: (ASCEND) Ascend World in SF?
>
> Is there a web address or a number for this. Couldn't find any info on the
> ascend web site, but I'll definitely be there.
>
> At 09:59 AM 8/23/98 -0400, Jason Nealis wrote:
> >
> >I got some announcement yesterday for Ascend World, It was dubbed the 1998
> >Ascend Users Expo in San Fran in Nov, Anyone planning on going ?
> >
> >
> >Jason Nealis
> >Director Internet Operations / Network Access
> >Erols Internet (An RCN Company)
> >
> >
> >++ Ascend Users Mailing List ++
> >To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> >To get FAQ'd: <http://www.nealis.net/ascend/faq>
> >
>
>
> - -------------------------------
> Derek Vadala (derek@usfca.edu)
> Information Technology
> University of San Francisco
> (415) 422 - 3825
> - -------------------------------
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Rob Myers <rmyers@unicom.net>
> Date: Sun, 23 Aug 1998 19:29:35 -0500 (CDT)
> Subject: (ASCEND) RADIUS unknown attributes
>
> In conjunction with the upgrade to 6.1.7 we upgraded Radius to (not sure
> what version) and are occasionally getting "unknown attribute" messages,
> i.e.:
>
> Aug 22 23:59:19.923 radiusd[27154] Received unknown attribute 51
> Aug 22 23:59:19.923 radiusd[27154] Received unknown attribute 50
>
> Evidently when you get this problem it's because you haven't got the
> correct dictionary file. The problem is that we have the correct
> dictionary file, complete with those attributes and others installed!
>
> Can anyone offer any assistance as to why we are getting these errors?
> We are running Ascend's RADIUS (I believe) on a Solaris 2.6 box.
>
> Thanks,
> Rob
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Rob Francis <rfrancis@dti.net>
> Date: Sun, 23 Aug 1998 20:29:56 -0400 (EDT)
> Subject: RE: (ASCEND) Outgoing calls happening w/no callback enabled?
>
> > When are the calls being made?
>
> Purely random times.
>
> > Is there a cluster to the times of the calls?
>
> Unfortunately, no.
>
> > If so, then you might try to monitor the equipment more closely at that time.
>
> That's the problem. It really does seem to come and go and random
> times. And very difficult to spot.
>
>
> > Do any of the numbers match the numbers recorded in the RADIUS Accounting
> > details file?
>
> You mean the numbers that are dialing in? And in the detail log? I
> don't see any numbers recorded there.
>
>
> > > If we do set up a callback account, then sure enough the outgoing call
> > > is logged to our access logs.
> >
> > Do you mean the "Syslog" information or the Accounting information?
>
> Yes, sorry. Syslog. And no outgoing calls get logged via syslog at
> all. But that's because I don't think we are doing any outgoing
> calls. Bell Atlantic insists we are. So when I created a callback
> account and made it dial it *did* get logged. None of the calls BA is
> talking about show up in logs.
>
>
> > Dialout #1 - Setting up an Dialout user with a local profile
>
> There are actuall *no* local profiles. I've double checked that.
>
> > Dialout #2 - Setting up an Dialout user with a RADIUS profile and route
>
> We've only created profiles of people with a Framed-Protocol of PPP,
> and I've confirmed there are no RADIUS profiles of any other type.
> What actually enabled a dialout user? I can't imagine there's one
> there, but I'll certainly check.
>
> > Dialout #3 - Setting up a Callback profile (local or RADIUS)
>
> Checked. There are none. And when we did set one up, it *did* get
> logged.
>
> > Dialout #4 - The "immediate modem" feature
> > note- Although this can be default disabled with the "Modem Dialout"
> > paramter, the default can be over-ridden using the RADIUS attribute
> > Ascend-Dialout-Allowed.
>
> Modem-Dialout=No is set on the MAX's, which completely disables the
> Immediate modem feature.
>
> > Dialout #5 - terminal server (termsrv) "open" command
> > Dialout #6 - terminal server (termsrv) "test" command
>
> As I mentioned earlier, all users have a Framed-Protocol of PPP, MP or
> MPP. Is there a way for these people to still get termsrv access?
> There are are telnet access lists, that prevent people from being able
> to telnet to the router itself.
>
>
> > Dialout #7 - Enabling either MPP or BACP protocols for a connection
>
> This allows someone to dialout?
>
> > You should try to follow the basic steps to secure your MAX to prevent
> > people from modifying your configuration.
> >
> > Security #1 - Make sure you enable Telnet Security and install a Telnet PW.
>
> Already Done.
>
> > Security #2 - Make sure you disable the Operations, Edit *, and * Diag
> > functions in the Default Security profile.
>
> Already Done.
>
> > Security #3 - Make sure you either disable the SNMP R/W Community or
> > change the default SNMP R/W Community or that you enable
> > SNMP security and define the WR Mgr addresses
>
> Already Done.
>
> > Security #4 - Read the MAX Security Supplement for more tips
>
> Also done.
>
>
> > Some steps you might take to try to see what is happening. Make sure
> > that you enable syslog on the MAX. Enable the "mdialout" Diagnostic
> > command. Periodically use the "mdialsess" Diagnostic command to check
> > for dialout sessions.
>
> Will do.
>
> I should say that these are great sugguestions, and I'm not trying to
> say, "been there, done that". I confirmed all of those settings just
> now. It's certainly possible someone has gotten in there and messed
> with things. I'm still searching for possible ways this could be
> happening, so far nothing explains the lack of logging, perhaps the
> mdialout Diagnostic command will help. Thanks very much!
>
> Any other ideas welcome.
>
> - -rob
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Rob Myers <rmyers@unicom.net>
> Date: Sun, 23 Aug 1998 19:38:25 -0500 (CDT)
> Subject: Re: (ASCEND) 6.1.7 and randomness of the Max IP address....
>
> I am experiencing a strange problem similar to what you are seeing with
> 6.1.7. When I do a traceroute to a customer's ISDN device or modem from
> our cisco or one of our UNIX boxes I no longer get the Ethernet IP address
> of the MAX. I would prefer to get this address since I can find out what
> one of our MAXen they are connected to. :)
>
> This is the only thing I have seen with 6.1.7 so far that I have had any
> problems with. I'd like to see it fixed in a future release but it is
> more of an annoyance than a crippling problem.
>
> - -Rob-
>
> > From: Raul Zighelboim <rzig@verio.net>
> > Date: Fri, 21 Aug 1998 23:11:19 -0500
> > Subject: (ASCEND) 6.1.7 and randomness of the Max IP address....
> >
> > Hello there; I wander is anyone else is experiencing this problem with
> > 6.1.7:
> >
> > I assigned numberred point to point links to isdn dialup; 1 /30 ip on my
> > end, and another /30 ip in the customer end.
> > Up to now, it all worked well.
> >
> > With the last release of Ascend, the Max IP Address (used to always be
> > the ip assigned to the Ethernet port) follows the WAN ip of the last
> > incoming call.
> >
> > So, A traceroute would show : Ethernet -> WAN13-local_ip ->
> > WAN27-remote_ip when it used to be :
> > Ethernet -> MAX-Ethernet_ip
> > - -> WAN27-remote_ip...
> >
> > Strange.... will Ascend ever be able to deliver code with V.90 ? I wish
> > the would leave 5.0p24 alone, replacing only the rockwell microcode.
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Jason Nealis <nealis@babylon.erols.com>
> Date: Sun, 23 Aug 1998 21:17:09 -0400 (EDT)
> Subject: Re: (ASCEND) TNT Code Rev. 2.1.9...
>
> So far so good for me, I had one box Fatal Error with a Index 41, (Memory
> Issue) but it seems that may have been a bad shelf-controller.
>
> I've got it running on about 65 Boxes..
>
> Jason Nealis
> Director Internet Operations / Network Access
> Erols Internet (An RCN Company)
>
>
> On Sun, 23 Aug 1998, Todd A. Blank wrote:
>
> > Is anyone out there using 2.1.9 for the TNT yet? I was just curious.
> > It looks like it fixes many issues. I am just looking for anyone's
> > experience with it so far.
> >
> > Thanks for you help,
> >
> > Todd A. Blank
> > Columbus NAP, Inc.
> > ++ Ascend Users Mailing List ++
> > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > To get FAQ'd: <http://www.nealis.net/ascend/faq>
> >
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Jason Nealis <nealis@babylon.erols.com>
> Date: Sun, 23 Aug 1998 21:15:12 -0400 (EDT)
> Subject: Re: (ASCEND) Ascend World in SF?
>
> Yea, There a web addr on it, But the flyer is at work, I'll post
> the URL up tomorrow if no-one has beaten me to it.
>
> Jason
>
>
> On Sun, 23 Aug 1998, Derek Vadala wrote:
>
> > Is there a web address or a number for this. Couldn't find any info on the
> > ascend web site, but I'll definitely be there.
> >
> > At 09:59 AM 8/23/98 -0400, Jason Nealis wrote:
> > >
> > >I got some announcement yesterday for Ascend World, It was dubbed the 1998
> > >Ascend Users Expo in San Fran in Nov, Anyone planning on going ?
> > >
> > >
> > >Jason Nealis
> > >Director Internet Operations / Network Access
> > >Erols Internet (An RCN Company)
> > >
> > >
> > >++ Ascend Users Mailing List ++
> > >To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > >To get FAQ'd: <http://www.nealis.net/ascend/faq>
> > >
> >
> >
> > -------------------------------
> > Derek Vadala (derek@usfca.edu)
> > Information Technology
> > University of San Francisco
> > (415) 422 - 3825
> > -------------------------------
> > ++ Ascend Users Mailing List ++
> > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > To get FAQ'd: <http://www.nealis.net/ascend/faq>
> >
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Neale Banks <neale@idesign.com.au>
> Date: Mon, 24 Aug 1998 12:44:35 +1100
> Subject: Re: (ASCEND) 6.1.7 and randomness of the Max IP address....
>
> Interesting... I'm running 6.1.7 (very plain, no OSPF or stacking) and can't
> seem to reproduce this. My methodology was to take the output of "show
> users" and traceroute to each IP in turn - in all cases the secon-last hop
> was the ethernet interface of the MAX (and yes, we do have some customers
> using numbered interface link). Is there something else I need to see this
> problem?
>
> Regards,
> Neale.
>
> At 19:38 23/08/98 -0500, Rob Myers wrote:
> >I am experiencing a strange problem similar to what you are seeing with
> >6.1.7. When I do a traceroute to a customer's ISDN device or modem from
> >our cisco or one of our UNIX boxes I no longer get the Ethernet IP address
> >of the MAX. I would prefer to get this address since I can find out what
> >one of our MAXen they are connected to. :)
> >
> >This is the only thing I have seen with 6.1.7 so far that I have had any
> >problems with. I'd like to see it fixed in a future release but it is
> >more of an annoyance than a crippling problem.
> >
> >-Rob-
> >
> >> From: Raul Zighelboim <rzig@verio.net>
> >> Date: Fri, 21 Aug 1998 23:11:19 -0500
> >> Subject: (ASCEND) 6.1.7 and randomness of the Max IP address....
> >>
> >> Hello there; I wander is anyone else is experiencing this problem with
> >> 6.1.7:
> >>
> >> I assigned numberred point to point links to isdn dialup; 1 /30 ip on my
> >> end, and another /30 ip in the customer end.
> >> Up to now, it all worked well.
> >>
> >> With the last release of Ascend, the Max IP Address (used to always be
> >> the ip assigned to the Ethernet port) follows the WAN ip of the last
> >> incoming call.
> >>
> >> So, A traceroute would show : Ethernet -> WAN13-local_ip ->
> >> WAN27-remote_ip when it used to be :
> >> Ethernet -> MAX-Ethernet_ip
> >> - -> WAN27-remote_ip...
> >>
> >> Strange.... will Ascend ever be able to deliver code with V.90 ? I wish
> >> the would leave 5.0p24 alone, replacing only the rockwell microcode.
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Rob Myers <rmyers@unicom.net>
> Date: Sun, 23 Aug 1998 22:29:46 -0500 (CDT)
> Subject: Re: (ASCEND) 6.1.7 and randomness of the Max IP address....
>
> I would guess it has something to do with OSPF and/or stacking. We use
> RADIUS to assign the route to the user and have both numbered and
> unnumbered routes connecting to us. Usually, customers using Pipelines
> are set up using unnumbered routes and people w/ Ciscos are given numbered
> routes. Then we have the modem and NAT users that are randomly assigned
> IPs.
>
> The IP address that the MAX broadcasts via traceroute (even if you
> traceroute to the max itself) is the one that we assign to our unnumbered
> Pipeline dial-in users.
>
> Here's a better explanation:
>
> Let's say the ethernet address of the MAX is 10.0.0.21. I assign Joe
> Pipeline User an IP range of 10.0.1.1/24. We tell RADIUS to give the MAX
> an IP address of 10.0.0.254/24 (i.e. "Ascend-PPP-Address = 10.0.0.254")
> since there's no telling which box he hits.
>
> Whenever I traceroute to Joe or anyone else for that matter the MAX
> reports its address as 10.0.0.254 (even if I report to the max).
>
> Hope that makes sense. :)
>
> - -Rob-
>
>
> On Mon, 24 Aug 1998, Neale Banks wrote:
>
> > Interesting... I'm running 6.1.7 (very plain, no OSPF or stacking) and can't
> > seem to reproduce this. My methodology was to take the output of "show
> > users" and traceroute to each IP in turn - in all cases the secon-last hop
> > was the ethernet interface of the MAX (and yes, we do have some customers
> > using numbered interface link). Is there something else I need to see this
> > problem?
> >
> > Regards,
> > Neale.
> >
> > At 19:38 23/08/98 -0500, Rob Myers wrote:
> > >I am experiencing a strange problem similar to what you are seeing with
> > >6.1.7. When I do a traceroute to a customer's ISDN device or modem from
> > >our cisco or one of our UNIX boxes I no longer get the Ethernet IP address
> > >of the MAX. I would prefer to get this address since I can find out what
> > >one of our MAXen they are connected to. :)
> > >
> > >This is the only thing I have seen with 6.1.7 so far that I have had any
> > >problems with. I'd like to see it fixed in a future release but it is
> > >more of an annoyance than a crippling problem.
> > >
> > >-Rob-
> > >
> > >> From: Raul Zighelboim <rzig@verio.net>
> > >> Date: Fri, 21 Aug 1998 23:11:19 -0500
> > >> Subject: (ASCEND) 6.1.7 and randomness of the Max IP address....
> > >>
> > >> Hello there; I wander is anyone else is experiencing this problem with
> > >> 6.1.7:
> > >>
> > >> I assigned numberred point to point links to isdn dialup; 1 /30 ip on my
> > >> end, and another /30 ip in the customer end.
> > >> Up to now, it all worked well.
> > >>
> > >> With the last release of Ascend, the Max IP Address (used to always be
> > >> the ip assigned to the Ethernet port) follows the WAN ip of the last
> > >> incoming call.
> > >>
> > >> So, A traceroute would show : Ethernet -> WAN13-local_ip ->
> > >> WAN27-remote_ip when it used to be :
> > >> Ethernet -> MAX-Ethernet_ip
> > >> - -> WAN27-remote_ip...
> > >>
> > >> Strange.... will Ascend ever be able to deliver code with V.90 ? I wish
> > >> the would leave 5.0p24 alone, replacing only the rockwell microcode.
> >
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: "Jerry Ablan" <jablan@mindbuilder.com>
> Date: Sun, 23 Aug 1998 22:11:06 -0500
> Subject: (ASCEND) MIF spec
>
> Can anyone point me to a MIF spec?
>
> - -- Jerry
>
> - -----
> A woman travels to a surreal land and kills the first person she happens upon. She then teams up with three complete strangers to kill again.
>
> - -- An objective look at the Wizard of Oz --
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: basher@alpha.ces.cwru.edu (Tim Basher)
> Date: Mon, 24 Aug 98 0:06:10 EDT
> Subject: Re: (ASCEND) RADIUS unknown attributes
>
> > Aug 22 23:59:19.923 radiusd[27154] Received unknown attribute 51
> > Aug 22 23:59:19.923 radiusd[27154] Received unknown attribute 50
>
> There are the attributes:
> ATTRIBUTE Acct-Multi-Session-Id 50 string
> ATTRIBUTE Acct-Link-Count 51 integer
>
> > Evidently when you get this problem it's because you haven't got the
> > correct dictionary file.
>
> These messages mean that radiusd cannot find the attributes in the
> dictionary. This could be because (a) the attributes are not in the
> dictionary, or (b) the attributes are in the dictionary but there is
> a syntax error on or before the lines in the dictionary, or (c) that
> the lines exist in the dictionary you are examining, but radiusd is
> using a different dictionary, or (d) that radiusd is using the same
> dictionary, but that you started radiusd before modifying the dictionary,
> and thus radiusd is still using the in-memory copy rather than the
> new modified dictionary.
>
> Try verifying the contents of the dictionary and the path used by
> radiusd and then terminating and restarting radiusd.
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: basher@alpha.ces.cwru.edu (Tim Basher)
> Date: Mon, 24 Aug 98 0:27:53 EDT
> Subject: RE: (ASCEND) Outgoing calls happening w/no callback enabled?
>
> > > Do any of the numbers match the numbers recorded in the RADIUS Accounting
> > > details file?
> >
> > You mean the numbers that are dialing in? And in the detail log? I
> > don't see any numbers recorded there.
>
> Do you see any of the phone numbers that Bell Atlantic says you are calling
> being recorded as the source (Caller-Id or Calling-Station-Id) of a call in
> your details file. This might allow you to match them up with customers or
> some other known reference point.
>
> Typically, when using a BRI or PRI you will receive the phone number of
> device that originated the call (Caller-Id or Calling-Station-Id) and the
> phone number they dialed (Client-Port-DNIS or Called-Station-Id) recorded
> with the RADIUS accounting information.
>
> > > Dialout #7 - Enabling either MPP or BACP protocols for a connection
> >
> > This allows someone to dialout?
>
> The protocols allow either side to add additional bandwidth to a session
> by initiating a new call. In theory, this might allow your system to call
> a customer back.
>
> > > > Almost all of the numbers being called answer with a modem.
>
> If you allow the modems to establish a carrier, do you get a login prompt
> or other recognizable information? If you look up the phone numbers, do
> you recognize the name of the owner?
>
> > > > Bell Atlantic insists the calls are going out of our PRI's.
>
> Do you have any customers you need to call from your PRI's? If not, you
> might try having Bell Atlantic block outgoing calls. If they still report
> calls, then there may be a switch problem.
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> From: Jason Nealis <nealis@babylon.erols.com>
> Date: Mon, 24 Aug 1998 00:43:00 -0400 (EDT)
> Subject: Re: (ASCEND) MIF spec
>
> Just FYI, MIF apparently is going away in 7.0, So if you are looking
> to build tools for MIF, may I suggest you look at SNMP instead this
> way you can be sure you scripts will work in the future
>
> (I've still got to rebuild my whole slew of tools)
>
> Jason Nealis
> Director Internet Operations / Network Access
> Erols Internet (An RCN Company)
>
>
> On Sun, 23 Aug 1998, Jerry Ablan wrote:
>
> > Can anyone point me to a MIF spec?
> >
> > -- Jerry
> >
> > -----
> > A woman travels to a surreal land and kills the first person she happens upon. She then teams up with three complete strangers to kill again.
> >
> > -- An objective look at the Wizard of Oz --
> >
> > ++ Ascend Users Mailing List ++
> > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > To get FAQ'd: <http://www.nealis.net/ascend/faq>
> >
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
> ------------------------------
>
> End of ascend-users-digest V96 #1302
> ************************************
>
> ++ Ascend Users Mailing List Digest++
> To unsubscribe:
> "echo unsubscribe | mail ascend-users-digest-request@bungi.com"
> To get FAQ'd: <http://www.shore.net/~dreaming/ascend-faq>
> or <ftp://ftp.shore.net/members/dreaming/ascend-faq.txt>
>
Ken Rea
wildcat@pcez.com
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>