(RADIATOR) dual IP'd radiator problem

[Hugh Irvine]

Hello Mike -

Most radius implementations expect the radius reply to come back from 
the same IP address the initial request was sent to. Quite a few people 
on this list have had similar problems that were resolved by going back 
to a single address.

As usual, a copy of the configuration file (no secrets) and a trace 4 
debug are what is needed to see what is happening. You might also need 
to look at a tcpdump (or snoop/ethereal/whatever..) to verify the IP 
headers.

regards

Hugh


On Wednesday, August 7, 2002, at 12:27 AM, Mike Greene wrote:

> Hello list,
>
> Our radiator server is currently dual IP'd in preparation for a network 
> renumbering.  We seem to be having trouble getting our 3COM total 
> control chassis to authenticate to the new IP, our cisco 7206 is also 
> having trouble as well.
>
> The strange thing is that we see in the detail file the accounting 
> record, and we have the password logging turned on and the users are 
> passing, yet on the client end we are getting MS error 718 (PPP 
> Timeout), and on the cisco "LINK proto timeout".
>
> Currently the new IP is the secondary IP on the server, and it appears 
> the accounting records are fine with that setting, but the 
> authorization part isn't it gets to the end of the negotiation and then 
> fails, it appears to repeat the process 5 times then finally gives up.
>
> Can you dual IP a radiator server and then once all of the RAS devices 
> are switched over remove the unused IP?  We are using ports 1645/1646.
>
>
> - Mike
>
> ------------------------------------------------
> Rock Island Communications, Inc.  (360)-378-5884
> http://www.rockisland.com/  San Juan Islands, WA
> ------------------------------------------------
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.