Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) RADIUS: Changes between primary and secondary and vice-versa.



Hi,

	I would like to know what is the MAX critiria to choose between the
primary and secondary radius server. I have configured the MAX to change
to the secondary after 10 sec. timeout. This is fine and works well. The
first accounting packet that comes to the secondary as a Acct-Delay-Time
= 10. What I don't understand is why, after that, the authentication is
done in the primary radius server and the accounting in the
secondary(with Acct-Delay-Time = 0). The output of diag "radstats" is
this one:

 > radstats
RADIUS authen stats:
0  sent[A,O]=[2242,9], rcv[A,O]=[2239,1]
   timout[A,O]=[3,8], unexp=0, bad=729, authOK=1511
   IpAddress <IP SERVER 1>, curServerFlag 1
1  sent[A,O]=[135,12], rcv[A,O]=[132,12]
   timout[A,O]=[3,0], unexp=0, bad=82, authOK=61
   IpAddress <IP SERVER 2>, curServerFlag 0
2  sent[A,O]=[0,0], rcv[A,O]=[0,0]
   timout[A,O]=[0,0], unexp=0, bad=0, authOK=0
   IpAddress 0.0.0.0, curServerFlag 0
RADIUS accounting stats:
0  sent=2983, rcv=2980, timout=2, unexp=0, bad=0
   IpAddress <IP SERVER 1>, curServerFlag 1
1  sent=273, rcv=271, timout=2, unexp=0, bad=0
   IpAddress <IP SERVER 2>, curServerFlag 0
2  sent=0, rcv=0, timout=0, unexp=0, bad=0
   IpAddress 0.0.0.0, curServerFlag 0
Local Rad Acct Stats:
  nSent[OK,fail]=[3256,0], nRcv=3252, nDrop[QFull,Other]=[0,0]
  nRsp[TimOut,NoMatch]=[4,0], nBackoff[new,norsp]=[0,0]
  nAllocFail[timer,mem]=[0,0], nTimOutNoMatch=0, nBadVect=0
Local Rad Serv Stats:
  unkClient=0
  index 0 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 1 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 2 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 3 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 4 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 5 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 6 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 7 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0
  index 8 #Sent = 0, #SendFail=0 badAuthRcv = 0, badPktRcv = 0

	Shouldn't both functionalities be done in the same server at the same
time ? Or is this normal? Is there any documentation abount this
tecnical issue? Could somebody tell me that?

	TIA,
	Joao Moreira	

*************Tecnical Info***************
MAX 4K
Software +5.0Ap33
Load: ebm.m40

Primary radius server: radius-970814
Secondary radius server: radiusd-cistron-1.5.4.2
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


Follow-Ups: References: