April 2003 - USR-TC - mailman.xmission.com

Enable Authentication Counters Syslogs?
by Paul Farber 17 Apr '03

17 Apr '03

how do you enable the above? I tried: enable ? set ? set authentication ? to no avail. -- Paul Farber Farber Technology farber(a)admin.f-tech.net Ph 570-628-5303 Fax 570-628-5545

1 0

RE: [USR-TC] TC/RADIUS performance
by Joel - Fox Computers 17 Apr '03

17 Apr '03

My experience has been this: If the ARC get's a response from a RADIUS server, that becomes the active server and will be tried first until the ARC gets a response from another server, and so on. In other words, if your primary goes down, the arc hits the secondary, then the secondary becomes active. From that point forward, the ARC tries the secondary server first. Only when the secondary server fails to respond and the ARC has to request to the primary (and the primary responds) will the primary become the "active" authentication server. You can see this if you do a "show authentication" on the ARC - toward the bottom it displays "Active Authentication Server", which for me often is the secondary. Doing a "mon rad" shows that the secondary is then being requested first. So, your primary was probably NOT down for two hours - could have been just once for 5 seconds if someone tried to log in at that time. - Joel -----Original Message----- From: Paul Farber [mailto:farber@admin.f-tech.net] Sent: Wednesday, April 16, 2003 9:43 PM To: usr-tc(a)lists.xmission.com Subject: [USR-TC] TC/RADIUS performance Have a radius performance question. On April 16th my primary radius server (800Mhz, 256Mb RAM, Linux 2.4.20, ICRADIUS + MySQL, 1600 users) authenticated 2930 radius requests. It is also a local DNS resolver for all dial ins running djbdns. My backup RADIUS server (1.6Ghz, 256Mb RAM, Linux 2.4.20 ICRADIUS + MySQL 1600 users) caught 284 authentications. I have 3 HiperARC set up to authenticate off these servers with a timeout of 3 seconds and 10 retries. If 284 requests had to fail over to the secondary radius server that means that I had (3 x 10 x 284) 8520 seconds of primary RADIUS server being unavailable????? Thats 142 minutes or over two hours?!!?!?!?!?! With over 9% of the total requests having to go to the secondary?!?!?!?! Even if the ARC switched to the secondary after the first 3 second timeout thats (3x1x284) 852 seconds or over 14 minutes of primary auth server unavailibility?!?!?!?! ?!?!?!?!?!??!?!?!?!?!?!?!??!? How long will the the ARC retry the primary auth server??? The config says 10 times 3 seconds. But if I do the simple math then I had over two hours of downtime. I don't belive that or I am missing something. The primary radius server is on the same network as 1 ARC, the other two are routed from two other local LAN segments. The Secondary is 3 hops away. What am I missing??? -- Paul Farber Farber Technology farber(a)admin.f-tech.net Ph 570-628-5303 Fax 570-628-5545 _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

4 5

RE: [USR-TC] TC/RADIUS performance
by Joel - Fox Computers 17 Apr '03

17 Apr '03

Yes, sorta - actually the secondary doesn't have to "fail" - that's not the qualification - if it switches to the secondary, and then at some point later it takes more than 3 seconds for the secondary to respond, then the TC tries the primary - if it gets a response from the primary, the primary becomes the active RADIUS server. YOu said yourself that you have higher-latency between the TC and the secondary - so it makes sense that should it switch to the secondary, it will probably switch back to the primary in a short time. - Joel -----Original Message----- From: Paul Farber [mailto:farber@admin.f-tech.net] Sent: Thursday, April 17, 2003 1:49 PM To: Discussion relating to the 3Com/US Robotics Total Control modem systems. Subject: RE: [USR-TC] TC/RADIUS performance Then you are saying the secondary has to fail before the primary is tried again? So then both my primary AND secondary are failing... I find that hard to believe. Logs show that the daemons are not stopping or restarting. -- Paul Farber Farber Technology farber(a)admin.f-tech.net Ph 570-628-5303 Fax 570-628-5545 On Wed, 16 Apr 2003, Joel - Fox Computers wrote: > My experience has been this: > > If the ARC get's a response from a RADIUS server, that becomes the active server and will be tried first until the ARC gets a response from another server, and so on. > > In other words, if your primary goes down, the arc hits the secondary, then the secondary becomes active. From that point forward, the ARC tries the secondary server first. Only when the secondary server fails to respond and the ARC has to request to the primary (and the primary responds) will the primary become the "active" authentication server. > > You can see this if you do a "show authentication" on the ARC - toward the bottom it displays "Active Authentication Server", which for me often is the secondary. Doing a "mon rad" shows that the secondary is then being requested first. > > So, your primary was probably NOT down for two hours - could have been just once for 5 seconds if someone tried to log in at that time. > > - Joel > > > -----Original Message----- > From: Paul Farber [mailto:farber@admin.f-tech.net] > Sent: Wednesday, April 16, 2003 9:43 PM > To: usr-tc(a)lists.xmission.com > Subject: [USR-TC] TC/RADIUS performance > > > Have a radius performance question. > > On April 16th my primary radius server (800Mhz, 256Mb RAM, Linux 2.4.20, > ICRADIUS + MySQL, 1600 users) authenticated 2930 radius requests. It is > also a local DNS resolver for all dial ins running djbdns. > > My backup RADIUS server (1.6Ghz, 256Mb RAM, Linux 2.4.20 ICRADIUS + MySQL > 1600 users) caught 284 authentications. > > I have 3 HiperARC set up to authenticate off these servers with a timeout > of 3 seconds and 10 retries. > > If 284 requests had to fail over to the secondary radius server that means > that I had (3 x 10 x 284) 8520 seconds of primary RADIUS server being > unavailable????? Thats 142 minutes or over two hours?!!?!?!?!?! With > over 9% of the total requests having to go to the secondary?!?!?!?! > > Even if the ARC switched to the secondary after the first 3 second timeout > thats (3x1x284) 852 seconds or over 14 minutes of primary auth server > unavailibility?!?!?!?! > > ?!?!?!?!?!??!?!?!?!?!?!?!??!? > > How long will the the ARC retry the primary auth server??? The config > says 10 times 3 seconds. But if I do the simple math then I had over two > hours of downtime. I don't belive that or I am missing something. > > The primary radius server is on the same network as 1 ARC, the other two > are routed from two other local LAN segments. The Secondary is 3 hops > away. > > What am I missing??? > > _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

2 1

console to HiperARC
by Lewis Bergman 17 Apr '03

17 Apr '03

This is about the third time I have tried this and been to stupid to get it done. I maight have even asked here once before. I am trying to configure a HipaerARC for the first time. I plug in the 3Com cable to the rs232 port with a null modem adapter on the computer side. I set dip 5 to ON. I see it go through the whole mess, copyrights and all. It asks me "Do you want to continue with HiPer Quick Setup?". Which, of course I do. When I try to answer it is as if the keyboard input is not there. All com settings are correct. I see the data flow from the ARC. It just doesn't respond to keyboard input. I thought it was my minicom so I tried Hyperterminal ion windows. Same thing. Tried a new NIC, same thing. Tried the original NIC, different NAC, same thing. If I set dip 5 back to default yes all I get is the boot kernel OK and I still can't get to a CLI. Does someone have any clues to this? -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 915-695-6962 ext 115

3 2

RE: [USR-TC] fast busies
by BSmith＠solunet.com 16 Apr '03

16 Apr '03

-----Original Message----- From: alex(a)wanex.ge Subject: [USR-TC] fast busies One or two days ago I started getting fust busies on one of our TCs. Everything seems to be ok - timeslots are idle or connected and modems are ok (Admin/Oper statur = Up/Up). What can be reason of this fust busies? _______________________________________________ Try this: Click on the span Configure -> Program Settings Select "Trunk Settings" scroll down the list to you find "Dial In Address" change it to "noAddress" Save it to you card, and I believe you may need to reset the DSP. Give that a try, I had that happen to a customer once, The DSP was expecting DNIS, but was not getting anything, so it made it go fast busy. ~Brian

2 2

Config questions
by Jim Sheldon 15 Apr '03

15 Apr '03

We recently had a area wide power outage and I lost programming on one of my chassis. I have RIP enabled but my chassis is not advertising routes. If I 'show ip routing' on a working chassis it shows that rip interfaces = 1. If I 'show ip routing' on the chassis in question is shows 0. How do I assign the interface to advertise RIP? Jim Sheldon Texas Communications

1 0

Cisco 700 ISDN modem/router
by pferraro＠wna-linknet.com 15 Apr '03

15 Apr '03

Does anyone know how to get one of these to talk to a USR Total control HUB? Here is what we get: Cisco dials in and gets IP number. We can ping the Cisco IP from all of our local workstations. We can traceroute to the IP. Log into the TC hub and try to ping the address and NOTHING?? The address and user show up in the hub doing s li co or li ip route. We can NOT ping any address from the Cisco 700, but any client behind the modem can ping any address out on the web... We are lost on this one since the standard config will dialup and work PROPERLY with another provider (do not know what type of NAS they are running) If anyone can provide a solution to this dilema, I would appreciate it. We have worked on configuring this for an entire day without any luck. Thanks in advance! Phillip ------------------------------------------------- WebMail Services Provided By WorldNet Access ------------------------- This E-Mail Was Scanned For Viruses by RAV@WorldNet Access -------------------------

4 6

NMC parameters
by alex＠wanex.ge 15 Apr '03

15 Apr '03

What is parameters for NMC if chassis is fully loaded with DSPs and 2 ARCs? Can 16Mb DRAM and 8Mb NVRAM NMC_CLK work Ok with this load? (Some traps are enabled and sometimes mrtg gets some information from nmc)

1 0

WTS: Hiper NMC
by sky1 15 Apr '03

15 Apr '03

I have (4) Hiper NMC card sets that I'm willing to part with at this time. (Get lots of request for them from guys on the list) Will sell them for $475.00 each Also, still selling the fully loaded Hiper chassis for $2750.00 each Hiper ARC's 128Mb version $125.00 each If you need any parts or pieces, let me know. Thanks, Shannan Young SouthWest Data Technology, Inc. 972-739-7010 972-739-7013 (Fax) sky1(a)airmail.net www.swdt.com

1 0

USR TC Chassis/modems
by Matthew Bailey 14 Apr '03

14 Apr '03

DO NOT ask me the specs I have nver used TC chassis and never care too. Anyway 3 USR Total Control hubs 48 V.90 modems in each T1 NIC/NAC card sets One chassis with pots ports. Here is the deal. Make arrangements to pick up this WEEK I will in no way help to ship package or describe the units. I am located in mount pleasant, MI 48858 These are free I just want them gone, if someone can make use of the parts come get them otherwise they will be in the dumpster saturday. --Matt

1 0