Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) 4048 56k 6.0.0 40 user wierdness

I'm experiencing some *very* odd behavior on one of our
RADIUS-authenticated Max 4048s.  All users will authenticate correctly up
to the 40 user mark, at which point the 4048 starts issuing LAN Security
errors on every account.  I've verified that the accounts are indeed valid
and have experienced the error firsthand.

Here's an ascendd debug of a sample session that experiences the problem:

unity2.root: radiusd -x -A incr
Apr 9 16:09:05.328 radiusd[624] Debugging enabled
Apr 9 16:10:07.866 radiusd[624] New request: lh1.lh.net.1025, id=61
Apr 9 16:10:07.868 radiusd[624] handle_radius_request: lh1.lh.net.1025,
id=61, code=1, length=93
Apr 9 16:10:07.871 radiusd[626] fork in rad_spawn_child (child)
Apr 9 16:10:07.873 radiusd[624] fork in rad_spawn_child (parent)
  request: User-Name = "lh.test"
  request: Challenge-Response = "(removed for your health)"
  request: NAS-Identifier = 207.48.52.1
  request: NAS-Port = 20109
  request: NAS-Port-Type = Async
  request: User-Service = Framed-User
  request: Framed-Protocol = PPP
  request: State = ""
  request: Acct-Session-Id = "259956827"
Apr 9 16:10:07.893 radiusd[626] rad_authenticate
Apr 9 16:10:07.923 radiusd[626] User record PASSWORD type is Radius
Apr 9 16:10:07.924 radiusd[626] authChapPwd
Apr 9 16:10:07.925 radiusd[626] send_accept: lh1.lh.net.1025, id=61
  reply: User-Service = Framed-User
  reply: Framed-Protocol = PPP
  reply: Ascend-Idle-Limit = 900
Apr 9 16:10:10.279 radiusd[625] New request: lh1.lh.net.1027, id=194
Apr 9 16:10:10.281 radiusd[625] handle_radius_request: lh1.lh.net.1027,
id=194, code=4, length=128
  request: NAS-Identifier = 207.48.52.1
  request: NAS-Port = 20109
  request: NAS-Port-Type = Async
  request: Acct-Status-Type = Stop
  request: Acct-Delay-Time = 0
  request: Acct-Session-Id = "259956827"
  request: Ascend-Disconnect-Cause = 101
  request: Ascend-Connect-Progress = 67
  request: Ascend-Xmit-Rate = 31200
  request: Ascend-Data-Rate = 31200
  request: Ascend-PreSession-Time = 19
  request: Ascend-Pre-Input-Octets = 402
  request: Ascend-Pre-Output-Octets = 275
  request: Ascend-Pre-Input-Packets = 10
  request: Ascend-Pre-Output-Packets = 15
  request: Ascend-Modem-PortNo = 15
  request: Ascend-Modem-SlotNo = 5
Apr 9 16:10:10.310 radiusd[625] send_acct_reply: lh1.lh.net.1027, id=194
Apr 9 16:10:22.920 radiusd[626] Child process exiting normally

What I see from the above is that:

1)  RADIUS accepts the user and authenticates (send_accept), and sends
appropriate information to fire up the PPP link.

2)  Immediately thereafter, the 4048 denies dialup access, due to cause 101
(Password error) at progress point 67 (IPNCP is in the Open state)

Any ideas offhand?  I'd ask our SE, but he's GFD :)

Thanks,
-Tom


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>