RE: (RADIATOR) Urgent - Radiator does not reply NAS with accounti ng accept respo nse
Title: RE: (RADIATOR) Urgent - Radiator does not reply NAS with accounti ng accept respo nse Hi Frank Thanks, appreciate your kindness in sharing with us your experience. I did use the IgnoreAccountingResponse statement on 3 of my 4 AuthBy RADIUS statement but I can't apply it on all the 4 because Radiator will end up not responding at all. In my environment, I have to forward the acct package to four Radius Host but my current Radiator configuration behaves in such a way that at least one Radius Host from the AuthBy RADIUS must reply to the Radiator otherwise it will not response to NAS which trigger my problem, my requirement is that even if all Radius host does not response it must still response to NAS with accounting accept. AccountingHandled Forces Radiator to acknowledge Accounting requests, even if the AuthBy modules for the Realm would have normally ignored the request. This is useful if you don't really want to record Accounting requests, but your NAS keeps retransmitting unless it gets an acknowledgment. Regards Brian Information Technology Tel: 68255466 -Original Message- From: Frank Danielson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 12, 2003 9:59 AM To: Brian CHNG Sing Yong; [EMAIL PROTECTED] Subject: RE: (RADIATOR) Urgent - Radiator does not reply NAS with accounti ng accept respo nse Hi Brian- We run a similar setup for CDMA IS-95 and 1XRTT networks and found the IgnoreAccountingResponse parameter does what you are describing. Here is the excerpt from the manual- 6.29.25 IgnoreAccountingResponse This optional flag causes AuthBy RADIUS to ignore replies to accounting requests, instead of forwarding them back to the originating host. This can be used in conjunction with the AccountingHandled flag in a Handler or Realm (see Section 6.16.10 ) to ensure that every proxied accounting request is replied to immediately, and the eventual reply from the remote Radius server is dropped. Frank Danielson [Infrastructure Architect] voice:407.515.8633 fax:407.515.9001 ClearSky Mobile Media, Inc. 56 E. Pine St. Suite 200 Orlando, FL 32801 USA -Original Message- From: Brian CHNG Sing Yong [mailto:[EMAIL PROTECTED]] Sent: Monday, August 11, 2003 9:07 PM To: [EMAIL PROTECTED] Subject: (RADIATOR) Urgent - Radiator does not reply NAS with accounting accept respo nse Importance: High Hi How can I configure the Radiator Radius to work in such a way that when NAS send an accounting packet to Radiator, it will reply immediately with accounting response and then proxy the accounting request to multiple Radius Host without waiting for accounting response from the Radius Host? Reason for this configuration:- I'm using the Radiator in a GPRS network and it has capability of accessing to the Internet WAP via GPRS, but I have one issue here is that the GGSN or NAS requires the Radius to response with a accounting response before it will establish a PDP context which will allow the mobile phone to access to the Internet, but due to the behavior of the Radiator Radius Server, it does not reply with the accounting response to the NAS until the Radius Host replies to the Radiator with the response. So when my Radius Host is down, it affects my GPRS network towards the Internet link. Regards Brian This email is confidential and privileged. If you are not the intended recipient, you must not view, disseminate, use or copy this email. Kindly notify the sender immediately, and delete this email from your system. Thank you. Please visit our website at www.starhub.com This email is confidential and privileged. If you are not the intended recipient, you must not view, disseminate, use or copy this email. Kindly notify the sender immediately, and delete this email from your system. Thank you. Please visit our website at www.starhub.com
(RADIATOR) Urgent - Radiator does not reply NAS with accounting accept response
Title: Urgent - Radiator does not reply NAS with accounting accept response Hi How can I configure the Radiator Radius to work in such a way that when NAS send an accounting packet to Radiator, it will reply immediately with accounting response and then proxy the accounting request to multiple Radius Host without waiting for accounting response from the Radius Host? Reason for this configuration:- I'm using the Radiator in a GPRS network and it has capability of accessing to the Internet WAP via GPRS, but I have one issue here is that the GGSN or NAS requires the Radius to response with a accounting response before it will establish a PDP context which will allow the mobile phone to access to the Internet, but due to the behavior of the Radiator Radius Server, it does not reply with the accounting response to the NAS until the Radius Host replies to the Radiator with the response. So when my Radius Host is down, it affects my GPRS network towards the Internet link. Regards Brian This email is confidential and privileged. If you are not the intended recipient, you must not view, disseminate, use or copy this email. Kindly notify the sender immediately, and delete this email from your system. Thank you. Please visit our website at www.starhub.com
RE: (RADIATOR) Queries on proxy radius and config file auto refresh on Radiator Radius
Hi
Hugh
Thanks for the
reply, further queries on the two questions, using the client default resolves
the need to configure new RAS client in the Radiator but at my Radius Host i
still need to add the RAS client on it, I wasn't thinking if the Radiator can
strip off NAS-IP and replace it's IP on the NAS-IP attributesbefore
sending to the Radius Host so that at the Radius host it will always appears as
the Radiator IP instead of the RAS IP, this effectively helps me in controlling
the effort to configure new NAS-IP on the Radius Host. Is this feasible?
Thanks
RAS- Radiator
- Radius Host
# Remove any
NAS-IP-Address
StripFromRequest
NAS-IP-Address
# Append a Filter-ID
AddToRequest
Calling-Station-Id=1.1.1.1
Second
questions
Using kill - HUP ,
am I right to say, I can just do a kill -HUP Process ID on the radisud
process and it will take effect on the new updated config file? But I have this
problem when I do this, the Radiator is not able to write into the mySQL DB
anymore until a complete shutdown and restarton the apps and DB, then it
will returnto normal operation. Thanks
kill -HUP
Process ID of the process "perl radiusd -config_file config file
name"
Regards Brian Information Technology
-Original Message-From: Hugh Irvine
[mailto:[EMAIL PROTECTED]Sent: Saturday, July 19, 2003 8:46
AMTo: Brian CHNG Sing YongCc: '[EMAIL PROTECTED]'; CHEW
Yong SinSubject: Re: (RADIATOR) Queries on proxy radius and config
file auto refresh on Radiator Radius
Hello Brian -
For your first question, you can use the AuthBy SQLRADIUS clause for your
radius proxy targets, and you can use a Client DEFAULT to match any number of
client devices.
Client DEFAULT
.
/Client
See section 6.45 in the Radiator 3.6 reference manual ("doc/ref.html").
For your second question, you can send the radiusd process a HUP signal to
perform a warm restart.
See section 7 in the manual.
regards
Hugh
On Saturday, Jul 19, 2003, at 01:22 Australia/Melbourne, Brian CHNG Sing Yong
wrote:
Hi
I've just deployed Radiator Radius in my workplace
but am facing some problems with having to make
changes so often and creating many downtimes on
my servers. Would appreciate if you can help me
with the following questions. Thanks
First Question
I'm doing proxy radius to multiple host and I want
to minimize having to configure the Radius Host each time a new RAS is deployed,
by default the Radiator will forward all Radius
Attributes to the Radius host and on the Radius host I would need to configure
the NAS-IP so that it will accept the
authentication/accounting packet from the RAS Client.
I'm looking at how to minimize changes made on the Radius Host as I would need to restart the
Radius Host whenever a change is made. Can I
configure the Radiator in such a way that it will strip off the NAS-IP and
replace it with its own IP as the NAS-IP so that the Radius host will only see
one NAS-IP or RAS Client IP? In this way I'll never need to add RAS Client on the Radius host. Or is there any
other better way to
tackle this? Thanks
eg
RAS1 à Radiator1 à
Radius1
RAS2 à Radiator1 à
Radius2
RAS3 à Radiator1 à
Radius3
Second Question
Can I configure the Radiator to re-read the config
file or clear the cache at regular interval so
that any changes made on the config file can be refreshed and take effect
without having to restart the processes which also means downtime needed, I'm
trying to figure out how the Radiator can be configured to minimize downtime.
Thanks
Regards
Brian
This email is confidential and privileged. If
you are not the intended recipient, you must not view, disseminate, use or copy
this email. Kindly notify the sender immediately, and delete this email from
your system. Thank you.
Please visit our website at www.starhub.com
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
This email is confidential and privileged. If you are not the intended recipient, you must not view, disseminate, use or copy this email. Kindly notify the sender immediately, and delete this email from your system. Thank you.
Please visit our website at www.starhub.com
(RADIATOR) Queries on proxy radius and config file auto refresh on Radiator Radius
Title: Queries on proxy radius and config file auto refresh on Radiator Radius Hi I've just deployed Radiator Radius in my workplace but am facing some problems with having to make changes so often and creating many downtimes on my servers. Would appreciate if you can help me with the following questions. Thanks First Question I'm doing proxy radius to multiple host and I want to minimize having to configure the Radius Host each time a new RAS is deployed, by default the Radiator will forward all Radius Attributes to the Radius host and on the Radius host I would need to configure the NAS-IP so that it will accept the authentication/accounting packet from the RAS Client. I'm looking at how to minimize changes made on the Radius Host as I would need to restart the Radius Host whenever a change is made. Can I configure the Radiator in such a way that it will strip off the NAS-IP and replace it with its own IP as the NAS-IP so that the Radius host will only see one NAS-IP or RAS Client IP? In this way I'll never need to add RAS Client on the Radius host. Or is there any other better way to tackle this? Thanks eg RAS1 Radiator1 Radius1 RAS2 Radiator1 Radius2 RAS3 Radiator1 Radius3 Second Question Can I configure the Radiator to re-read the config file or clear the cache at regular interval so that any changes made on the config file can be refreshed and take effect without having to restart the processes which also means downtime needed, I'm trying to figure out how the Radiator can be configured to minimize downtime. Thanks Regards Brian This email is confidential and privileged. If you are not the intended recipient, you must not view, disseminate, use or copy this email. Kindly notify the sender immediately, and delete this email from your system. Thank you. Please visit our website at www.starhub.com
