(RADIATOR) Help with Ascend Max and RADIUS performance

Hugh Irvine hugh at open.com.au
Mon Oct 6 18:05:08 CDT 2003


Hello Robert -

 From memory the MAX's have two sets of radius configuration - one for 
authentication and one for accounting. You will need to adjust the 
accounting radius configuration to suit.

Does anyone on the list have the exact configuration information?

regards

Hugh


On Monday, Oct 6, 2003, at 23:07 Australia/Melbourne, Robert Blayzor 
wrote:

> We have recently acquired several Ascent MAX 6000 boxes and are having 
> a
> problem with a lot of duplicate RADIUS accounting packets.  The problem
> seems to be that the MAX's are overly aggressive when sending RADIUS
> requests.  They seem to send requests every second until the timeout 
> seconds
> is reached, which seems a little extreme.  When you are doing multi-hop
> RADIUS proxy, some accounting requests usually take a second or more.
>
> I'm wondering if there is any way to tweak the MAX's RADIUS behavior 
> like
> you can in a Cisco AS5x00 series.
>
> Normally on a Cisco you can specify the RADIUS timeout, which is the 
> value
> between retry packets, the number of retries, and then the server 
> deadtime.
> I really want to step the MAX's down to about 3 seconds between retries
> because of the hops involved.  Right now we're seeing 2-3 duplicate
> accounting records because the MAX's are sending requests every second 
> until
> the requests are ack'd.  Seems overly aggressive to me.
>
> If this can be tweaked, where, and what settings should I use?  
> Ideally I'm
> looking for 3 seconds between requests with 3-5 retries until it 
> should go
> to the next server.
>
> Thanks in advance to anyone that can help.
>
> --
> Robert Blayzor, BOFH
> INOC, LLC
> rblayzor at inoc.net
> PGP: http://www.inoc.net/~dev/
> Key fingerprint = A445 7D1E 3D4F A4EF 6875  21BB 1BAA 10FE 5748 CFE9
>
> Calm down -- it's only ones and zeroes.
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list