"Ron Chinn" <[EMAIL PROTECTED]> wrote: > I have been watching with tcpdump for a few days. Of course, since I'm > watching, the problem hasn't happened very often. > > It does not show the remote server sending responses to the wrong IP. It > wouldn't receive them anyway, as our firewall would block it. I don't see > any log entires on the firewall to suggest this is happening. > > Below is an example of what tcpdump showed when the problem occurs. I've > changed the server names, but it's otherwise exactly what happened. In > this case, this user had 5 accounting entries for one session. > > At this point I'm about to move radius off the server I think is causing > the problem (local-radius1), though I'd like to find a more elegant > solution to the problem if possible.
Have you run tcpdump elsewhere in the network? Are you sure that the packets are making it *out* of the box? Or maybe they're being lost elsewhere in the network. You've got to track down all the possibilities, otherwise any solution is just shooting in the dark. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
