Re: (ASCEND) More on my weird auth problem

[Joel Wittenberg <joelw@ascend.com>]

Steve -

By default the Ascend boxes request config info from the Radius server.
This includes menus, static routes, permanent connections, frame relay
data linkinfo , data over voice bearer services info, banners, etc.  The
general format of the name used in such requests is:

	<service-name>-<ascend-nas-name>-<index>

If there is no response the NAS will repeat the request.

As long as the request is successful it will be repeated, with the index
incremented.  When it fails, the request sequence will start over, with the
index set to 1 and the <ascend-nas-name> field omitted (this allows for a
single Radius server to support multiple NASes, each with its own config
info, and each also sharing common config info).  If this request (that
is, one without the nas name) receives a failure response then the config
sequence for that service will be terminated.  

You may disable the config requests completely by setting

external-auth->rad-auth-client->allow-auth-config-rqsts = no

for TNT, the MAXen have a similar setting but I don't offhand recall
where in the menu system it is.

/joel


> ------------------------------
> 
> From: Steve Hovey <shovey@buffnet.net>
> Date: Fri, 17 Mar 2000 21:26:07 -0500 (EST)
> Subject: (ASCEND) More on my weird auth problem
> 
> This one box (the one I want to clear and start over on) gens the auth
> errors below (from radius logfile) - I thought maybe a param was off
> someplace, so I tsaved one from a different box that is working, trestored
> it to this one, changed the ethernet to the correct IPs for this one..
> Anwyay - anyone ever seen these errors and maybe have an idea?
> 
> Fri Mar 17 14:02:48 2000: Received-Authentication: 12/632 'route-1' from
> asc3.bu
> ffnet.net port 0 Outbound
> Fri Mar 17 14:02:48 2000: Authentication: 6/626 'permconn--1' from
> asc3.buffnet.
> net port 0 Outbound - FAILED Authentication failure -- total 0, holding 0
> Fri Mar 17 14:02:48 2000: Authentication: 7/627 'frdlink--1' from
> asc3.buffnet.n
> et port 0 Outbound - FAILED Authentication failure -- total 0, holding 0
> Fri Mar 17 14:02:48 2000: Authentication: 12/632 'route-1' from
> asc3.buffnet.net
>  port 0 Outbound - FAILED Authentication failure -- total 0, holding 0
> Fri Mar 17 14:02:48 2000: Authentication: 11/631 'dovbs-1' from
> asc3.buffnet.net
>  port 0 Outbound - FAILED Authentication failure -- total 0, holding 0
> Fri Mar 17 14:02:48 2000: Authentication: 10/630 'banner' from
> asc3.buffnet.net
> port 0 Outbound - FAILED Authentication failure -- total 0, holding 0
> Fri Mar 17 14:02:48 2000: Authentication: 9/629 'initial-banner-' from
> asc3.buff
> net.net port 0 Outbound - FAILED Authentication failure -- total 0,
> holding 0
> Fri Mar 17 14:02:48 2000: Authentication: 8/628 'bridge--1' from
> asc3.buffnet.ne
> t port 0 Outbound - FAILED Authentication failure -- total 0, holding 0
> Fri Mar 17 14:02:48 2000: Received-Authentication: 13/633 'initial-banner'
> from
> asc3.buffnet.net port 0 Outbound
> st
> 

-- 
joel wittenberg
InterNetworking Systems
joelw@lucent.com

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>