September 2002 - USR-TC - mailman.xmission.com

SNMP Requests
by Casen 10 Sep '02

10 Sep '02

Since you guys were oh so helpful with my Radius problem.. :) I'm fairly new to SNMP, so please don't laugh too hard if this is pretty basic. But anytime I try to query my HiperNMC for a value, all I get is the system.sysUpTime oid. I've downloaded all the MIBs from source-t and installed them. Here's a list of the output I get for a query. terra#> snmpget -m ALL -M ~xeen/tcrmibs/ hipernmc.aros.net publicstring 1.3.6.1.4.1.429.4.2.1.10.0 Did not find 'PerfCurrentCount' in module #-1 Did not find 'PerfIntervalCount' in module #-1 Did not find 'PerfTotalCount' in module #-1 system.sysUpTime.6.1.4.1.429.4.2.1.10.0 = Timeticks: (121730786) 14 days, 2:08:27.86 terra#> I pulled that OID from the recent conversation with pankaj, but I get the same thing with any of the oid's given under TCM's help for determining a particular value. I'm sure I'm just being doughheaded in one way or another, but I've pounded my head on this one for quite awhile and all I ended up with was a headache. Any help is appreciated. Casen ArosNet Systems Administration

2 1

RE: [USR-TC] Radius Authentication Algorithms.
by Joel - Fox Computers 10 Sep '02

10 Sep '02

Can you please clarify - I'm a little lost on the difference between "secondary" and "Backup" servers. Here's what I would want to do - I want all accounting and authentication requests to go to a single server. BUT - if that server fails - I want those to go to a different server, until my main one comes back online. So are you saying I should be using the "backup first server" rather than a "secondary"? Would be great if someone can ellaborate. Thanks, Joel -----Original Message----- From: Steve Brown [mailto:steve@neteze.com] Sent: Saturday, September 07, 2002 2:48 PM To: usr-tc(a)mailman.xmission.com Subject: RE: [USR-TC] Radius Authentication Algorithms. Ummm, sounds like an accounting server setup issue. There is a primary and secondary server, but I thought both are used for logging at the same time. Maybe you have secondary setup as a "backup" server when you should have primary backup server set as backup? That is to say use "set accounting_backup primary first_server" instead of "set accounting secondary_server" Just a guess, I can't really imagine the chassis trying to authenticate from two sources simultaneously, but if it can be done I'm open to learning about it and why the heck you would want to do that. Steve Brown Netease Santa Rosa, CA steve[AT]neteze.com > -----Original Message----- > From: usr-tc-admin(a)mailman.xmission.com > [mailto:usr-tc-admin@mailman.xmission.com]On Behalf Of Casen > Sent: Saturday, September 07, 2002 11:29 AM > To: usr-tc(a)mailman.xmission.com > Subject: [USR-TC] Radius Authentication Algorithms. > > > Hey List, > > We just recently upgraded all of our firmware's to try and solve a > problem we've been having. All connections made to our TCR equipment > end up getting double logged in our database when the user disconnects. > We had thought the problem might have been a firmware bug, but the > upgrades didn't help, so we dug a little bit deeper. > > We run a primary/secondary radius server, and after putting them into > debug mode were able to find that the TCR equipment is authenticating > with both of them, instead of trying the primary before falling back to > the secondary. Consequently, both servers are logging the connection > information and we end up with twice as many log files as we care for. > :) > > Here's a list of the RADIUS settings we have for the ARC. We suspect > that the problem lies in the 'Authentication Algorithm' but aren't > entirely positive, so I thought I would ask you. > > HiPer>> show radius > > RADIUS SETTINGS > Fill Null Attributes: DISABLED > Attribute Style: STANDARD > NAS Port Style : DEFAULT > Authentication Algorithm: ROUND_ROBIN > Interim Accounting Interval Status: DISABLED > Interim Accounting Interval: 240 seconds > IEA Radius Source Port Authentication DISABLED > IEA User Radius supplied username DISABLED > Send Unauthenticated STOP record ENABLED > Report Acct IP Addr only for Primary Link: DISABLED > Send only STOP Acct for failed services: DISABLED > DNIS Authentication Service Type: 10 > Configured Authentation Service Type: 0 > Radius NAS-PORT id style: DENSITY BASED > Radius Resource Reclaim style: DRAFT > Radius Reboot Indication style: FALL-THROUGH > Authentication Failure Trap State : ENABLED > DNIS NAS Port Style : DEFAULT > Radius Send Acct for Default User: ENABLED > HiPer>> > > And the options available for the algorithm setting: > > HiPer>> set radius authentication_algorithm > CLI - Missing Required Argument(s): > > This field is a KEYWORD LIST. The possible values are: > [ ACTIVE_SERVER FALL_THROUGH PREFERRED ROUND_ROBIN ] > HiPer>> > > Thanks for any help! > > Casen > ArosNet Systems Administration > > > _______________________________________________ > USR-TC mailing list > USR-TC(a)mailman.xmission.com > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

3 2

Interesting Observation
by Joel - Fox Computers 10 Sep '02

10 Sep '02

Something I thought may be of interest to some - I had the opportunity tonight to play with an old Gateway computer with the old "Telepath 56K with x2" modem in it. I have the software upgrade for V.90 support for it, and could switch back and forth. On a good phone line, I get 53333 x2 connection. Same modem, "upgraded" to V.90 gets only 49.3. On a poor line - x2 does 48000, V.90 does 45.3 at best. I tried this several times and the x2 is noticeably faster browsing web pages and such. The V.90 speeds are the same results I'm getting with most V.90 or V.92 modems on those 2 phone lines. What's more - the x2 connects in 13 seconds - same as I'm getting with V.92 Quick-Connect. Is it just me, or does X2 seem to be better all around? Any manufacturers still making good x2-compatible modems? Just curious if anyone else has noticed this. Thanks, Joel

1 0

RE: [USR-TC] Radius Authentication Algorithms.
by Joel - Fox Computers 08 Sep '02

08 Sep '02

Charles - Thanks! That's exactly what I was looking for! Joel -----Original Message----- From: Charles Sprickman [mailto:spork@inch.com] Sent: Sunday, September 08, 2002 1:22 AM To: usr-tc(a)mailman.xmission.com Subject: RE: [USR-TC] Radius Authentication Algorithms. On Sat, 7 Sep 2002, Joel - Fox Computers wrote: > Can you please clarify - I'm a little lost on the difference between > "secondary" and "Backup" servers. Secondary is for sending all accounting to a secondary server, in addition to the primary. > Here's what I would want to do - I want all accounting and > authentication requests to go to a single server. BUT - if that server > fails - I want those to go to a different server, until my main one > comes back online. For accounting you want the backup first server. Accounting will only go there if the primary is not reachable. > So are you saying I should be using the "backup first server" rather > than a "secondary"? Would be great if someone can ellaborate. It's hard to find where to set it because it doesn't show up in a "set accounting ?". Do a "set accounting_backup ?" to see how to set the primary backup. Just to confuse you, the authentication is not set up this way, just primary and secondary. You can alter the authentication behaviour with "set radIUS auTHENTICATION_ALGORITHM ?". Charles > Thanks, > > Joel > > > > -----Original Message----- > From: Steve Brown [mailto:steve@neteze.com] > Sent: Saturday, September 07, 2002 2:48 PM > To: usr-tc(a)mailman.xmission.com > Subject: RE: [USR-TC] Radius Authentication Algorithms. > > > Ummm, sounds like an accounting server setup issue. There is a primary and > secondary server, but I thought both are used for logging at the same time. > Maybe you have secondary setup as a "backup" server when you should have > primary backup server set as backup? > > That is to say use "set accounting_backup primary first_server" instead of > "set accounting secondary_server" > > Just a guess, I can't really imagine the chassis trying to authenticate from > two sources simultaneously, but if it can be done I'm open to learning about > it and why the heck you would want to do that. > > Steve Brown > Netease > Santa Rosa, CA > steve[AT]neteze.com > > > -----Original Message----- > > From: usr-tc-admin(a)mailman.xmission.com > > [mailto:usr-tc-admin@mailman.xmission.com]On Behalf Of Casen > > Sent: Saturday, September 07, 2002 11:29 AM > > To: usr-tc(a)mailman.xmission.com > > Subject: [USR-TC] Radius Authentication Algorithms. > > > > > > Hey List, > > > > We just recently upgraded all of our firmware's to try and solve a > > problem we've been having. All connections made to our TCR equipment > > end up getting double logged in our database when the user disconnects. > > We had thought the problem might have been a firmware bug, but the > > upgrades didn't help, so we dug a little bit deeper. > > > > We run a primary/secondary radius server, and after putting them into > > debug mode were able to find that the TCR equipment is authenticating > > with both of them, instead of trying the primary before falling back to > > the secondary. Consequently, both servers are logging the connection > > information and we end up with twice as many log files as we care for. > > :) > > > > Here's a list of the RADIUS settings we have for the ARC. We suspect > > that the problem lies in the 'Authentication Algorithm' but aren't > > entirely positive, so I thought I would ask you. > > > > HiPer>> show radius > > > > RADIUS SETTINGS > > Fill Null Attributes: DISABLED > > Attribute Style: STANDARD > > NAS Port Style : DEFAULT > > Authentication Algorithm: ROUND_ROBIN > > Interim Accounting Interval Status: DISABLED > > Interim Accounting Interval: 240 seconds > > IEA Radius Source Port Authentication DISABLED > > IEA User Radius supplied username DISABLED > > Send Unauthenticated STOP record ENABLED > > Report Acct IP Addr only for Primary Link: DISABLED > > Send only STOP Acct for failed services: DISABLED > > DNIS Authentication Service Type: 10 > > Configured Authentation Service Type: 0 > > Radius NAS-PORT id style: DENSITY BASED > > Radius Resource Reclaim style: DRAFT > > Radius Reboot Indication style: FALL-THROUGH > > Authentication Failure Trap State : ENABLED > > DNIS NAS Port Style : DEFAULT > > Radius Send Acct for Default User: ENABLED > > HiPer>> > > > > And the options available for the algorithm setting: > > > > HiPer>> set radius authentication_algorithm > > CLI - Missing Required Argument(s): > > > > This field is a KEYWORD LIST. The possible values are: > > [ ACTIVE_SERVER FALL_THROUGH PREFERRED ROUND_ROBIN ] > > HiPer>> > > > > Thanks for any help! > > > > Casen > > ArosNet Systems Administration > > > > > > _______________________________________________ > > USR-TC mailing list > > USR-TC(a)mailman.xmission.com > > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > > > > > _______________________________________________ > USR-TC mailing list > USR-TC(a)mailman.xmission.com > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > > _______________________________________________ > USR-TC mailing list > USR-TC(a)mailman.xmission.com > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

Radius Authentication Algorithms.
by Casen 07 Sep '02

07 Sep '02

Hey List, We just recently upgraded all of our firmware's to try and solve a problem we've been having. All connections made to our TCR equipment end up getting double logged in our database when the user disconnects. We had thought the problem might have been a firmware bug, but the upgrades didn't help, so we dug a little bit deeper. We run a primary/secondary radius server, and after putting them into debug mode were able to find that the TCR equipment is authenticating with both of them, instead of trying the primary before falling back to the secondary. Consequently, both servers are logging the connection information and we end up with twice as many log files as we care for. :) Here's a list of the RADIUS settings we have for the ARC. We suspect that the problem lies in the 'Authentication Algorithm' but aren't entirely positive, so I thought I would ask you. HiPer>> show radius RADIUS SETTINGS Fill Null Attributes: DISABLED Attribute Style: STANDARD NAS Port Style : DEFAULT Authentication Algorithm: ROUND_ROBIN Interim Accounting Interval Status: DISABLED Interim Accounting Interval: 240 seconds IEA Radius Source Port Authentication DISABLED IEA User Radius supplied username DISABLED Send Unauthenticated STOP record ENABLED Report Acct IP Addr only for Primary Link: DISABLED Send only STOP Acct for failed services: DISABLED DNIS Authentication Service Type: 10 Configured Authentation Service Type: 0 Radius NAS-PORT id style: DENSITY BASED Radius Resource Reclaim style: DRAFT Radius Reboot Indication style: FALL-THROUGH Authentication Failure Trap State : ENABLED DNIS NAS Port Style : DEFAULT Radius Send Acct for Default User: ENABLED HiPer>> And the options available for the algorithm setting: HiPer>> set radius authentication_algorithm CLI - Missing Required Argument(s): This field is a KEYWORD LIST. The possible values are: [ ACTIVE_SERVER FALL_THROUGH PREFERRED ROUND_ROBIN ] HiPer>> Thanks for any help! Casen ArosNet Systems Administration

3 2

RE: [USR-TC] Please identify code running
by Joel - Fox Computers 06 Sep '02

06 Sep '02

FYI - At least according to Source-T .107 isn't available yet: -----Original Message----- From: Sohail Sarwar Sent: Friday, September 06, 2002 1:40 PM To: Joel - Fox Computers Subject: Re: No sir, That code is not available. Actually, I not heard anything from 3Com concernign a new release. Best Regards, Sohail Sarwar Sohail Sarwar Source Technology Network Engineer Check Point Certified Security Expert (CCSE) - NG Check Point Certified Security Administrator (CCSA) - NG -----Original Message----- From: Terry Kennedy [mailto:terry@olypen.com] Sent: Friday, September 06, 2002 1:00 PM To: usr-tc(a)mailman.xmission.com Subject: Re: [USR-TC] Please identify code running There is also 3.5.107 ----- Original Message ----- From: "WebMaster" <webmaster(a)floodcity.net> To: <usr-tc(a)mailman.xmission.com> Sent: Friday, September 06, 2002 10:51 AM Subject: RE: [USR-TC] Please identify code running > > 3.5.105? I thought 3.5.100 was the newest DSP code. Or has there been another > ER release? > > Thanks, > > Allen > > > > > And on an even sider side note: > > > > Some people were recently asking about what codes to upgrade. We > > upgraded to the following code about two weeks ago and so far haven't > > experienced any problems for our users: > > > > HiperNMC: 8.6.3 (Was 6.something) > > HiperARC: 5.3.3 (Was 5.0.9) > > HiperDSP: 3.5.105 (Was 2.0.19) > > > > v.92 is enabled, and we have verified v.92 connections establish > > correctly. Also, we've done some extensive tests with Lucent WinModems, all > > of which connected solidly. Most customers/tests have > > reported/shown less line noise disconnects and slightly increased > > transfer speeds. > > > > Just an FYI for the list. > > > > -----Original Message----- > > From: usr-tc-admin(a)mailman.xmission.com > > [mailto:usr-tc-admin@mailman.xmission.com] On Behalf Of Todd Bertolozzi > > Sent: Friday, September 06, 2002 11:17 AM > > To: usr-tc(a)mailman.xmission.com > > Subject: [USR-TC] Please identify code running > > > > > > On a side note....can you please indicate the code revision you are using > > when asking for help. > > > > Todd > > > > -----Original Message----- > > From: usr-tc-admin(a)mailman.xmission.com > > [mailto:usr-tc-admin@mailman.xmission.com]On Behalf Of Lisa Casey > > Sent: Friday, September 06, 2002 10:25 AM > > To: usr-tc(a)mailman.xmission.com > > Subject: [USR-TC] Changed subject: listening on port 23 > > > > > > Hi Jeff, > > > > I changed the subject on here, shoulda done that on my first post since I > > was changing the topic of the thread. > > > >> Weird...its like it should be in CLOSE_WAIT (I think > >> that's what its called), but maybe the NETServer doesn't have a way to > >> designate that state? That would be weird... not sure on this part. > > > > I'ld have thought the same thing. Maybe since I did just clear a bunch of > > hung telnets the "listens" will eventually clear up on their own. I could > > probably clear them up by power cycling the box but won't do that since it > > would disconnect quite a few users :-) > > > > > > > >> 520/udp is RIP routing protocol. Do you have routing > >> turned on for that user? > > > > Now this is what bothers me. Call me paranoid, but I'm always watching out > > for users doing weird things (or doing things that are against our > > Acceptable Use Policy). No, I don't have any kind of special routing turned > > on for any customer, they are all (except for a few ISDN users which this > > guy is not) normal 56K analog dial-ups authenticating via a standard > > implementation of Cistron Radius. Now I'm wondering what this guy is up > > to... (if anything). > > > > Lisa Casey, Webmaster > > Netlink 2000, Inc. > > lisa(a)jellico.net > > > > > > _______________________________________________ > > USR-TC mailing list > > USR-TC(a)mailman.xmission.com > > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > > > > > > > > > > _______________________________________________ > > USR-TC mailing list > > USR-TC(a)mailman.xmission.com > > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > > > > > > _______________________________________________ > > USR-TC mailing list > > USR-TC(a)mailman.xmission.com > > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > > > > > _______________________________________________ > USR-TC mailing list > USR-TC(a)mailman.xmission.com > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

RE: [USR-TC] V92
by Joel - Fox Computers 06 Sep '02

06 Sep '02

Does anyone have a modem-on-hold application? Would love to try it but hvaen't seen it anywhere, doesn't come with any of the modems I have. Anyone have any suggestions? -----Original Message----- From: Lewis Bergman [mailto:lbergman@abi.tconline.net] Sent: Friday, September 06, 2002 12:49 PM To: usr-tc(a)mailman.xmission.com Subject: [USR-TC] V92 I'll rename this thread since it really is something else. Casen mentioned the v.92 code is running well. Have you checked the modem on hold feature? -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 915-695-6962 ext 115 _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

2 1

RE: [USR-TC] V92
by Joel - Fox Computers 06 Sep '02

06 Sep '02

Also on the V.92 issue - can anyone explain the difference between the phase 1 quick connect and phase 2 options? I've got both enabled - and customers get connected in about 12-15 seconds - but it sounds different and not near as quick as what you hear when you listen to the sample on V92.com. Thanks, Joel -----Original Message----- From: Joel - Fox Computers Sent: Friday, September 06, 2002 12:59 PM To: usr-tc(a)mailman.xmission.com Subject: RE: [USR-TC] V92 Does anyone have a modem-on-hold application? Would love to try it but hvaen't seen it anywhere, doesn't come with any of the modems I have. Anyone have any suggestions? -----Original Message----- From: Lewis Bergman [mailto:lbergman@abi.tconline.net] Sent: Friday, September 06, 2002 12:49 PM To: usr-tc(a)mailman.xmission.com Subject: [USR-TC] V92 I'll rename this thread since it really is something else. Casen mentioned the v.92 code is running well. Have you checked the modem on hold feature? -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 915-695-6962 ext 115 _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

abt 1.3.6.1.4.1.429.4.2.1.10.0 (total modem in use)
by pankaj 06 Sep '02

06 Sep '02

Hi all, I am monitoring total number of modems in use using mrtg, and using this OID for that 1.3.6.1.4.1.429.4.2.1.10.0 (using HiperArc,6 Hiperdsp-e1r2) Its giving me some more values than actual modems in use( i.e I am manually doing 'list connections' on hiperarc than 48 connections are there and the same time doing snmpwalk using this OID giving me 64 . ) Is this problem of snmp or something wrong with the modems??? And day by day this differance is increases.......After rebooting the chassis , again its working ok,,,,,, and after passing days again day by day it increasing. I am also observing per slot using this OID 1.3.6.1.4.1.429.4.10.35.1.3.0 and the total of all the 6 slots is mathing exactly with the list connections result. Thanks pankaj

9 12

V92
by Lewis Bergman 06 Sep '02

06 Sep '02

I'll rename this thread since it really is something else. Casen mentioned the v.92 code is running well. Have you checked the modem on hold feature? -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 915-695-6962 ext 115

1 0