On Mon, 25 Apr 2005, Mike Cisar wrote: > I have been trying to troubleshoot a RADIUS issue with my upstream provider. > We've recently started seeing places in our accounting logs where we are > receiving 5 start and 5 stop packets for each caller. > > They have told us... "... This proves, at least now, we are not receiving > multiple accounting packets from the NAS. We checked our radius logs for > any clues, and saw that we have multiple "missedaccounting" to your server. > This happens when we never receive a response from your radius when sending > multiple instances of an accounting record. It seems that you do not reply > to incoming accounting data. By doing this, it should resolve the issue." > > Since my configuration has not changed, and the problem has been on and off > during the course of the past week or two... I am assuming that I am indeed > sending responses to accounting packets, but they are getting lost in > transit since if I weren't sending at all, then the problem should be > consistant all of the time rather than just having popped up. > > Could their be any other cause of them not seeing a response? > > Any suggestions/hints/tips on troubleshooting are appreciated as always. >
Just some ideas below. radiusd -X will show you what is going on, you could pipe it to a file for a few minutes, then kill it and restart in normal and then less the file. It will show you if you are sending accounting responses or not. If not, it will tell you why? or Run tcpdump -i yourinterface -s 0 -w accounting.cap udp port 1813 (note the syntax could be different on your version of tcpdump) -i = interface -s = snaplen (0 = capture whole packet) -w = writes the capture to a file Then open it with ethereal. Check out if an accounting request comes in followed by a reply, followed by the same request in and another reply out, etc... Are your authentication requests coming from the same upstream NASes? Are those working? Perhaps you have multiple interfaces on that machine and your sending packets back out to that IP from a different interface? netstat -rn will show the routing table - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
