EAP packets from 2 different upstream servers

Alan DeKok aland at deployingradius.com
Mon Sep 18 16:31:21 CEST 2017

On Sep 18, 2017, at 10:11 AM, Alex Sharaz <alex.sharaz at york.ac.uk> wrote:
> I'm seeing quite a few
> Mon Sep 18 15:02:40 2017 : Warning: EAP packets are arriving from two
> different upstream servers.  Has there been a proxy fail-over?
> messages on my ORPS servers  and I'm trying to find out where they come
> from.

  They come because the packets for one EAP session are arriving from two different upstream home servers.

  i.e. packet 1 comes from upstream A, and packet 2 comes from upstream B.

  This usually indicates that the upstreams are broken, and failover over in stupid ways.  Or, a server C is doing load-balancing across upstream server A and B, but isn't paying attention to the EAP state.

  They SHOULD be load-balancing based on something common to all of the EAP packets, like Calling-Station-ID.

  Or... maybe there are networking issues between your server and upstream server C.  So server C thinks your site is down, and tries to fail-over to another path.

> However, when I try running FR in degug mode I never see the above errors.

  Running in debug mode shouldn't change the behaviour of the upstream servers.

  Alan DeKok.

More information about the Freeradius-Users mailing list