We have a problem when radiator tries to double check a Cisco NAS using SNMP
for an ISDN user.
While it checks correctly all the NAS ports that are used for Async
connections (analog dialup), when it tries to check the ports that are used
for ISDN connections (normally ports 20000 and up), it fails allowing the
same user to be connected twice.
Here is the logfile output for the first attept. Note the NAS port (20101):
Fri Feb 18 10:09:04 2000: DEBUG: Handling request with Handler
'Realm=spark.net.gr,NAS-Port-Type=ISDN'
Fri Feb 18 10:09:04 2000: DEBUG: Rewrote user name to paul
Fri Feb 18 10:09:04 2000: DEBUG: SESSINT Deleting session for paul,
195.66.100.149, 20101
Fri Feb 18 10:09:04 2000: DEBUG: Handling with Radius::AuthSQL
Fri Feb 18 10:09:04 2000: DEBUG: Handling with Radius::AuthLDAPSDK
Fri Feb 18 10:09:04 2000: DEBUG: Radius::AuthLDAPSDK looks for match with
paul
Fri Feb 18 10:09:04 2000: DEBUG: Radius::AuthLDAPSDK ACCEPT:
Fri Feb 18 10:09:04 2000: DEBUG: Access accepted for paul
Fri Feb 18 10:09:04 2000: DEBUG: Packet dump:
And here is the second attempt (port 20102):
Fri Feb 18 10:09:05 2000: DEBUG: Handling request with Handler
'Realm=spark.net.gr,NAS-Port-Type=ISDN'
Fri Feb 18 10:09:05 2000: DEBUG: Rewrote user name to paul
Fri Feb 18 10:09:05 2000: DEBUG: SESSINT Deleting session for paul,
195.66.100.149, 20102
Fri Feb 18 10:09:05 2000: DEBUG: Checking if user is still online: Cisco,
paul, 195.66.100.149, 20101, 0000077
Fri Feb 18 10:09:05 2000: DEBUG: Running command `/usr/local/bin/snmpget
195.66.100.149 xxxx
.iso.org.dod.internet.private.enterprises.9.2.9.2.1.18.20101`
Fri Feb 18 10:09:05 2000: NOTICE: SESSINT Session for paul at
195.66.100.149:20101 has gone away
Fri Feb 18 10:09:05 2000: DEBUG: SESSINT Deleting session for paul,
195.66.100.149, 20101
Fri Feb 18 10:09:05 2000: DEBUG: Handling with Radius::AuthSQL
Fri Feb 18 10:09:05 2000: DEBUG: Handling with Radius::AuthLDAPSDK
Fri Feb 18 10:09:05 2000: DEBUG: Radius::AuthLDAPSDK looks for match with
paul
Fri Feb 18 10:09:05 2000: DEBUG: Radius::AuthLDAPSDK ACCEPT:
Fri Feb 18 10:09:05 2000: DEBUG: Access accepted for paul
When I run snmpget from the command line for the ISDN ports, I get the
following response:
# /usr/local/bin/snmpget 195.66.100.149 xxxx
.iso.org.dod.internet.private.enterprises.9.2.9.2.1.18.20101
Error in packet
Reason: (noSuchName) There is no such variable name in this MIB.
This name doesn't exist: enterprises.9.2.9.2.1.18.20022
This happens ONLY for the ISDN users. For the PSTN users snmpget works
normally, correctly checking the Ciscos for double login attempts.
I would appreciate any help.
Thanks in advance
________________________________
Nikos Aslanakis - SparkNet S.A.
Tech Dpt - Systems Admin
Thessaloniki - Greece
tel. +30 31 868080
fax. +30 31 867778
http://www.spark.net.gr
mailto:[EMAIL PROTECTED]
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
