EAP packets from 2 different upstream servers
Alan DeKok
aland at deployingradius.com
Mon Sep 18 16:31:21 CEST 2017
On Sep 18, 2017, at 10:11 AM, Alex Sharaz <alex.sharaz at york.ac.uk> wrote:
>
> I'm seeing quite a few
> Mon Sep 18 15:02:40 2017 : Warning: EAP packets are arriving from two
> different upstream servers. Has there been a proxy fail-over?
>
> messages on my ORPS servers and I'm trying to find out where they come
> from.
They come because the packets for one EAP session are arriving from two different upstream home servers.
i.e. packet 1 comes from upstream A, and packet 2 comes from upstream B.
This usually indicates that the upstreams are broken, and failover over in stupid ways. Or, a server C is doing load-balancing across upstream server A and B, but isn't paying attention to the EAP state.
They SHOULD be load-balancing based on something common to all of the EAP packets, like Calling-Station-ID.
Or... maybe there are networking issues between your server and upstream server C. So server C thinks your site is down, and tries to fail-over to another path.
> However, when I try running FR in degug mode I never see the above errors.
Running in debug mode shouldn't change the behaviour of the upstream servers.
Alan DeKok.
More information about the Freeradius-Users
mailing list