Lost package after use FreeRadius
Dear Freeradius, At first, I use RouterOS(Mikrotik) as pppoe server and radius server. Now I use RouterOS as pppoe server and user FreeRadius as radius server. After changing as above, we find some pppoe users can dial up successfully via freeradius, but their internet transportation will lost package even can’t visit any website. I would like to know, how to explain the situation? What am I supposed to solve this problem? P.S When I change RouterOS to pppoe and radius server again (disable freeradius), it will all be ok. Thank you very much. Robin Lu
Robin wrote:
At first, I use RouterOS(Mikrotik) as pppoe server and radius server. Now I use RouterOS as pppoe server and user FreeRadius as radius server.
After changing as above, we find some pppoe users can dial up successfully via freeradius, but their internet transportation will lost package even can’t visit any website.
I would like to know, how to explain the situation? What am I supposed to solve this problem?
Make FreeRADIUS send back an Access-Accept containing the same attributes as sent by Access-Accept by the Mikrotik server. Alan DeKok.
Dear Alan, Actually, only about 5-10% users have this problem. If it's access-accept attributes issue, why will not all users lose package or not visit website? Where can I find any documents about this? Thanks. Robin -----Original Message----- From: freeradius-users-bounces+freeradius=itpm.net@lists.freeradius.org [mailto:freeradius-users-bounces+freeradius=itpm.net@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Saturday, November 20, 2010 12:30 AM To: FreeRadius users mailing list Subject: Re: Lost package after use FreeRadius Robin wrote:
At first, I use RouterOS(Mikrotik) as pppoe server and radius server. Now I use RouterOS as pppoe server and user FreeRadius as radius server.
After changing as above, we find some pppoe users can dial up successfully via freeradius, but their internet transportation will lost package even can’t visit any website.
I would like to know, how to explain the situation? What am I supposed to solve this problem?
Make FreeRADIUS send back an Access-Accept containing the same attributes as sent by Access-Accept by the Mikrotik server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Robin, Have FreeRadius mirror the Access-Accept (plus reply-attributes) of your Mikrotik radius server. You should be able to do a tcpdump (or snoop if it's on Solaris) to see the authentication messaging. Perhaps your Mikrotik radius server is setting some network-level parameters in the access-accept. If it is, you'll want FreeRadius to have the same behavior. As long as the access-accept and reply-attributes are the same, it should not matter which radius server you are using.
Actually, only about 5-10% users have this problem.
From your description of the packet loss, I can't fathom how any radius server could have that impact/result.
If it's access-accept attributes issue, why will not all users lose package or not visit website?
If all your users are configured the same, then they should have the same experience. I'd lean towards network troubleshooting for the problem you describe. Regards, Jason P Hodges -----Original Message----- From: freeradius-users-bounces+jhodges=pocket.com@lists.freeradius.org [mailto:freeradius-users-bounces+jhodges=pocket.com@lists.freeradius.org ] On Behalf Of Robin Sent: Friday, November 19, 2010 11:19 AM To: 'FreeRadius users mailing list' Subject: RE: Lost package after use FreeRadius Dear Alan, Actually, only about 5-10% users have this problem. If it's access-accept attributes issue, why will not all users lose package or not visit website? Where can I find any documents about this? Thanks. Robin
Strange situation but you should check default profile which is set on Mtik. It should contain valid DNS server(s), valid Local Address, valid Remote Address (ip pool for pppoe users) and that pool must exist on Mtik (IP -> Pool). Of course, all addresses which you have in ip pools must be properly routed. On 11/19/2010 5:00 PM, Robin wrote:
Dear Freeradius,
At first, I use RouterOS(Mikrotik) as pppoe server and radius server. Now I use RouterOS as pppoe server and user FreeRadius as radius server.
After changing as above, we find some pppoe users can dial up successfully via freeradius, but their internet transportation will lost package even can’t visit any website.
I would like to know, how to explain the situation? What am I supposed to solve this problem?
P.S
When I change RouterOS to pppoe and radius server again (disable freeradius), it will all be ok.
Thank you very much.
Robin Lu
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, About address/ip pool/pppoe users setting & configuration, I had used these profiles to a small area network (PPPoE, LAN network) successfully. Under the circumstances, I met the problem too. After I changed line from user house to my switch, it's ok. Now I'm using FreeRadius with same configuration in other small area network (PPPoE, DSL network). Even if I changed telephone line from user house to my DSL concentrator, these issues of lost package still is exist. At this time, I find one of reason of user offline is "lost-Carrier" in FreeRadius radacct table. Thanks. Robin -----Original Message----- From: freeradius-users-bounces+freeradius=itpm.net@lists.freeradius.org [mailto:freeradius-users-bounces+freeradius=itpm.net@lists.freeradius.org] On Behalf Of Marinko Tarlac Sent: Saturday, November 20, 2010 5:23 PM To: FreeRadius users mailing list Subject: Re: Lost package after use FreeRadius Strange situation but you should check default profile which is set on Mtik. It should contain valid DNS server(s), valid Local Address, valid Remote Address (ip pool for pppoe users) and that pool must exist on Mtik (IP -> Pool). Of course, all addresses which you have in ip pools must be properly routed. On 11/19/2010 5:00 PM, Robin wrote:
Dear Freeradius,
At first, I use RouterOS(Mikrotik) as pppoe server and radius server. Now I use RouterOS as pppoe server and user FreeRadius as radius server.
After changing as above, we find some pppoe users can dial up successfully via freeradius, but their internet transportation will lost package even can’t visit any website.
I would like to know, how to explain the situation? What am I supposed to solve this problem?
P.S
When I change RouterOS to pppoe and radius server again (disable freeradius), it will all be ok.
Thank you very much.
Robin Lu
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.
html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Jason Hodges -
Marinko Tarlac -
Robin