Re: (ASCEND) Max 6000 - LAN security errors during heavy load

[Troy Settle <rewt@i-Plus.net>]

With the d/p codes of 101/67, have you checked to see if that user was
already logged on at the time?

Seems that people like to share usernames and passwords.  IIRC, the 101
can be caused when people attempt multiple logins.

The original poster didn't indicate what radius/syslog messages were being
generated.  Does this also fit his problem?


--
  Troy Settle <st@i-Plus.net>
  Network Administrator, iPlus Internet Services
  http://www.i-Plus.net



On Fri, 9 Apr 1999, J. Wells wrote:

> At 05:09 PM 4/9/99 -0500, John Coy wrote:
> >I have several MAX 6000 terminal servers on my network.
> >I've been experiencing some intermittant problems lately
> >which appear to crop up when the terminal server is heavily
> >loaded.  I am running the 7.0.4 firmware.
> >
> >What appears to happen is when the Max has more than 72 connections,
> >it will give a LAN security error when a user is logging in.
> >There is no reason for this (ie: the RADIUS server is running fine,
> >the user is not already logged in, the user supplied the correct
> >username and password).
> >
> >Rebooting the MAX makes the problem go away.
> >
> >The problem is intermittant.
> >
> >Has anyone else experienced these same problems?  Info/Feedback
> >would be greatly appreciated.
> 
> We have a related problem with a MAX 2024, running 7.0.3 (but the problem
> has likely been there with various 6.x.x releases too)
> 
> Some users, some times, get immediately disconnected after authenticating.
> Syslog shows these calls connecting, and following modem negotiation the
> RADIUS server log shows that authentication was successful. However, the
> MAX then immediately disconnects the user. Syslog then gets warning saying
> "LAN security error" for the username. A few seconds later syslog and
> RADIUS accounting record the end of the call, with the username and a
> disconnect code of 101 (invalid user) and progress code of 67. (The RADIUS
> accounting log has only a STOP record and doesn't show the username.)
> 
> Our MAX isn't heavily loaded, and I haven't been able to correlate this
> problem to anything else. Between 5% and 10% of our calls end with this
> c=101, p=67 combination.
> 
> I wish I had an answer, but I don't. We've got a ticket with Ascend on
> this, and as requested sent them a wanNext trace of one such call, but
> haven't (yet?) heard back anything helpful.
> 
> John Wells
> School District 79 - Cowichan Valley
> Duncan, BC, Canada
> jwells@sd79.bc.ca
> 
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>