monitor an eap session in a production environment with a lot of devices

[Alan Buxey]

wireshark is also very good for this kind of thing too (especially
timeouts, retransmits, EAP flows etc)

alan

On 28 September 2017 at 17:11, Marco Santantonio
<marco.santantonio at unito.it> wrote:
> ok Alan,
>
> i try to explain better...
>
> I'm newbie in freeradius. With a lot of debug and test I understand how
> server works (and I find it great) but i'm struggling to understand and
> debug problems such as retransmissions, timeouts and similar situations
> because I can not reproduce them and study them.
>
> I've already tested raddebug and now I'll try it with radmin
>
> So I would ask if someone had matured some method that could help in this
> kind of situation...
>
> many thank's for your job!!!
>
> Marco
>
> 2017-09-28 17:36 GMT+02:00 Alan DeKok <aland at deployingradius.com>:
>
>> On Sep 28, 2017, at 10:02 AM, Marco Santantonio <
>> marco.santantonio at unito.it> wrote:
>> >
>> > I wanted to ask how to monitor an eap session
>>
>>   What does that mean?
>>
>> > in a production environment
>> > with a lot of devices. Have you developed a method or a best practice
>> that
>> > helps in those cases?
>>
>>   To do what?  Please *describe* what you want to do.
>>
>> > Analyzing freeradius debug, in addition to the state attribute, there is
>> > some internal variable to see if a package is part of an ongoing session,
>> > it's a retransmitted or duplicated packet, or is it the beginning of a
>> new
>> > session?
>>
>>   If the request has a State attribute, it's part of an ongoing
>> authentication session, which is usually EAP.
>>
>>   If the request has no State attribute, it's either PAP, or the start of
>> an EAP session.
>>
>>   Duplicate requests are *never* processed through the server.
>>
>>   Alan DeKok.
>>
>>
>
>
> --
> ****************************************
> Marco Santantonio
> Direzione Sistemi Informativi, Portale, E-learning
> Sezione Fonia, VoIP e WiFi
> www.unito.it
> ****************************************
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html