Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Lan security error woes

hi,
when it happens look which ip address the users get if then look at the if mgr
if this ip is already in use.
there is a known problem with TR opened that ip address get stuck
at the if table but free from the pool , so the max keep assigning this ip address
but after the auth it see that it already have it at the if table so it drop the call
with cause 101.
to free this ip address from the if table you should see which card related to it
and reset it. thats the only solution until ascend will fix it.
Assaf Homsky.

System Administrator wrote:

> Hello fellow listers,
>
> New to the list. Hope you can help with my problem.
>
> SITUATION:
> We got here a Max 4048 with 5, 16 port (yes, 5) modem cards in it and 3
> ISDN PRI lines installed, NFAS'd with 1 D-channel.
> Code is v6.0.2
> Users dialing in are analog users at 56k or below.
> Authentication is via a 3com RADIUS and accounting server on NT. DB is sql
> (access 97) with ODBC drivers. Relevant RADIUS attribute values that
> RADIUS is sending are FRAMED_ADDRESS = "255.255.255.254" USER_SERVICE_TYPE
> = 2 FRAMED_PROTOCOL = 1 FRAMED_ROUTING = 0 FRAMED_COMPRESSION = 1
>
> IP pools are as follows:
> Pool#                Base         Count      InUse
>    1             205.147.217.1      59         20
>    2           205.147.217.193      62          0
>  Number of remaining allocated addresses:    0
>
> PROBLEM:
> When the box gets busy (65+ users), users are dropped off right after they login.
> Error is "LAN security error". In syslog, disconnect code is 101, progress
> code is 67. When activity drops, <55 users, errors almost all but
> disappear.
>
> I'd upgrade to a newer code to see if it fixes it, but it doesn't look
> like there's a way to turn off V.90 in it, is there?
>  (we run both Kflex and X2 servers and have found V.90 to be too unstable)
>
> our max4004 with 2 PRIs and 4 12 port cards has no problem with these LAN
> errors, nor have problems on our X2 boxes. (this kind of problem anyway, i
> wont even go into how bad Total Control hubs are)
>
> Any help is appreciated. Thanx,
>
> -Tony
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> Anthony J. Biacco                           Network Administrator/Engineer
> admin@intergrafix.net                        Intergrafix Internet Services
>
>           "The best way to predict the future, is to invent it."
> http://cygnus.ncohafmuta.com                    http://www.intergrafix.net
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:   <http://www.nealis.net/ascend/faq>



begin:          vcard
fn:             Assaf Homsky
n:              Homsky;Assaf
org:            koor comunication
adr:            modin 8 st.;;;LOD;;;ISRAEL
email;internet: asih@isdn.net.il
title:          technical support
tel;work:       972-8-9134843
tel;fax:        972-8-9134869
x-mozilla-cpt:  ;0
x-mozilla-html: FALSE
version:        2.1
end:            vcard
Follow-Ups: References: