Hi John -
On Tue, 10 Aug 1999, [EMAIL PROTECTED] wrote:
> Something interesting: I had an NT customer call me up today and he told me that he
>was able to connect and browse yesterday just fine for about two hours today he
>can't. The logfile and detail file showed no difference in what happened, except
>that it was logged in the detail file multiple times. There were two start
>accounting records and three stop all with the same session ID the only difference is
>that the "Acct-Delay-time" is different. I have noticed this in many other locations
>in the detail file as well.
>
> More info: When an NI customer connects and can't browse (open socket connections)
>the are able to ping, trace and perform host name lookups, so it doesn't appear to be
>a routing issue.
>
> Here are portions of the logfile at trace level 4. I have included what the startup
>looks like, what an NT (bad) connection looks liks and what a 98 (good) connection
>looks like. I am not sure why it says that thoes attribute numbers are not defined
>because they are, they are Ascend specific attributes, but that only seems to affect
>accounting.
>
> Mon Aug 9 09:42:16 1999: DEBUG: Packet dump:
> *** Sending to 216.98.155.2 port 1026 ....
> Code: Access-Accept
> Identifier: 214
> Authentic: <205><141>8<169>u:#<157><246><183><157><154><135><184><233>j
> Attributes:
> Framed-Address = 255.255.255.254
> User-Service-Type = Framed-User
> Framed-Protocol = PPP
> Framed-IP-Netmask = 255.255.255.0
> Framed-Routing = None
> Framed-MTU = 1500
> Framed-Compression = Van-Jacobsen-TCP-IP
> Session-Timeout = 28800
> Idle-Timeout = 1800
>
> Mon Aug 9 09:53:32 1999: DEBUG: Packet dump:
> *** Sending to 216.98.155.2 port 1026 ....
> Code: Access-Accept
> Identifier: 244
> Authentic: ~<244><149><209><139><21><159>&&#<21><175>0<245><138><30>
> Attributes:
> Framed-Address = 255.255.255.254
> User-Service-Type = Framed-User
> Framed-Protocol = PPP
> Framed-IP-Netmask = 255.255.255.0
> Framed-Routing = None
> Framed-MTU = 1500
> Framed-Compression = Van-Jacobsen-TCP-IP
> Session-Timeout = 28800
> Idle-Timeout = 1800
>
We notice in both these examples that you are using
Framed-IP-Netmask = 255.255.255.0
We are more used to seeing
Framed-IP-Netmask = 255.255.255.255
And we have seen strange routing behaviour with incorrect netmasks.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
