[RADIATOR] Ignoring effects of dead server monitoring

Howard, Christopher Christopher-Howard at utc.edu
Mon Aug 17 14:33:05 UTC 2020


Our network hardware is using radius for authentication (802.1x and management CLI). They monitor for dead radius servers by sending an authentication for a non-existent username and watching for the reject. If a reject never comes, then it assumes the server is dead and stops using it for a configured amount of time.

We use the SNMPAgent for monitoring and this is seriously skewing results. Because of this, right now 85% of all authentication is rejected, which is extremely high. Is it possible to still reject the authentication request because it is a nonexistent username, but not include these rejects in the snmp statistics? Something like: if username x; then reject, don't log, don't add to statistics.

-Christopher

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.open.com.au/pipermail/radiator/attachments/20200817/867ba4af/attachment.html>


More information about the radiator mailing list