(RADIATOR) Lucent APX and auth-config requests

[Hugh Irvine]

Hello Viraj -

On Thursday 06 September 2001 12:56, Viraj Alankar wrote:

> > Hello,
>
> I recently lost some sleep over a problem with a Ascend/Lucent APX. Maybe
> someone else here can advise (or take heed).
>
> One night the APX suddenly started sending authentication requests for
> frdlink-*, ipxroute-*, appleroute, and other nonsense. Well in our case
> authentication for this RAS just happened to be promiscuous (that is, free
> authentication).  This seemed to cause some sort of problem for the RAS,
> because it kept sending these requests over and over at about 40 auth
> packets/second with these bogus requests.
>
> Now I assumed that the following setting would fix this:
>
> http://www.open.com.au/radiator/faq.html#71
>
> But it didn't. The requests kept coming even after a RAS reboot. What I
> then did was deny these bogus requests:
>
> <Handler User-Name = /^((ipx|apple)route|permconn|frdlink)-/>
> </Handler>
>
> which stopped them altogether. Then everything was back to normal.
>

Note that the above does not stop the NAS sending the requests, it just stops 
Radiator from replying.

Also note that something must have changed on the NAS (perhaps a software 
upgrade?) to cause it to change behaviour.

> Just wondering if anyone else has come across this problem of the RAS
> ignoring the auth-config setting. We are running TAOS 9.0.1 on the RAS.
>

Please let us know the answer so we can update the FAQ.

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.