monitor an eap session in a production environment with a lot of devices

[Marco Santantonio]

ok Alan,

i try to explain better...

I'm newbie in freeradius. With a lot of debug and test I understand how
server works (and I find it great) but i'm struggling to understand and
debug problems such as retransmissions, timeouts and similar situations
because I can not reproduce them and study them.

I've already tested raddebug and now I'll try it with radmin

So I would ask if someone had matured some method that could help in this
kind of situation...

many thank's for your job!!!

Marco

2017-09-28 17:36 GMT+02:00 Alan DeKok <aland at deployingradius.com>:

> On Sep 28, 2017, at 10:02 AM, Marco Santantonio <
> marco.santantonio at unito.it> wrote:
> >
> > I wanted to ask how to monitor an eap session
>
>   What does that mean?
>
> > in a production environment
> > with a lot of devices. Have you developed a method or a best practice
> that
> > helps in those cases?
>
>   To do what?  Please *describe* what you want to do.
>
> > Analyzing freeradius debug, in addition to the state attribute, there is
> > some internal variable to see if a package is part of an ongoing session,
> > it's a retransmitted or duplicated packet, or is it the beginning of a
> new
> > session?
>
>   If the request has a State attribute, it's part of an ongoing
> authentication session, which is usually EAP.
>
>   If the request has no State attribute, it's either PAP, or the start of
> an EAP session.
>
>   Duplicate requests are *never* processed through the server.
>
>   Alan DeKok.
>
>


-- 
****************************************
Marco Santantonio
Direzione Sistemi Informativi, Portale, E-learning
Sezione Fonia, VoIP e WiFi
www.unito.it
****************************************