On Tue, 17 Sep 2002, Iasonas Charalambous wrote:
> Hi,
>
> I am using Freeradius-0.7 on a linux machine. My access servers are Cisco
> 5300. I have noticed that in the case of the stale ISDN
> connections "checkrad" does not work very well. For instance an ISDN stale
> connection cannot be detected immediately by checkrad. The problem seems to
> be the "snmpwalk" command in "checkrad" (shown below) that checks the "isdn
> history" on the access server instead of the actual connected isdn users.
> The isdn history on a C5300 can keep disconnected isdn calls for a maximum
> of 15 minutes. If a stale user tries to reconnect within 15 minutes of his
> disconnection he will be rejected. Any ideas how to solve this problem?
>
>
> if($login eq $ARGV[3]) {
> return 1;
> }else{
> $out=`$snmpwalk $ARGV[1] $pass
> .iso.org.dod.internet.private.enterprises.9.9.27.1.1.3.1.7`;
> if($out=~/\"$ARGV[3]\"/){
> return 1;
> }else{
> return 0;
> }
>
>
> Iasonas
It seems that we are using the wrong MIB (CISCO-CALL-HISTORY-MIB) while we
should be using the CISCO-AAA-SESSION-MIB
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t3/dt_asmib.htm
One problem is that this MIB is only supported by IOS > 12.1(3)T.
I will not commit a fix to checkrad yet because i 'd like to first check the
behaviour of a few cisco access servers we have around here.
If you want you can replace the OID with
.iso.org.dod.internet.private.enterprises.9.9.150.1.1.3.1.2 until the fix is
commited.
Thanks for the bug report.
--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED] National Technical University of Athens, Greece
Work Phone: +30 10 7721861
'Go back to the shadow' Gandalf
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
