On 28 Jan 2014, at 10:56, Clement Ogedengbe <c.ogedengbe@worc.ac.uk> wrote:
The reply-log of the Main server and the backup server to the NAS is similar as below: (You could see that the same NAS (10.255.253.2) is involved in both connections.
Reply from the backup server to the NAS -> with this user gets online ================================================================= 10.255.253.2 Returned from 193.62.48.60 for User xxxx - Tue Jan 28 09:19:35 2014 Packet-Type = Access-Accept MS-CHAP2-Success = 0x00533d44363743314134363437423344393546414538463137443441333743334335454134373036414433 MS-MPPE-Recv-Key = 0xd233362f60149491fff8e1009d0f7940 MS-MPPE-Send-Key = 0x2cb6ef890950e98f530dabec5dfffe91 MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004
Reply from the Main server to the NAS -> with this user UNABLE to get online ================================================================= 10.255.253.2 Returned from 193.62.48.61 for User xxxx - Tue Jan 28 09:51:57 2014 Packet-Type = Access-Accept MS-CHAP2-Success = 0x00533d44303538334343433436373339323643313033343843413135463643373637333639373241423130 MS-MPPE-Recv-Key = 0xc4c255e279235d1abc4128569b4391b6 MS-MPPE-Send-Key = 0x3773e3518d6620d5d8f85e158848c601 MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004
Hm, those look OK. I don't read MSHCAPv2 though, maybe someone who does can comment on whether they're actually OK. It's probably a network issue then, look at counters on the NAS. Verify timeout/malformed packet counters associated with the RADIUS hosts aren't incrementing. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2