Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) radius help



> what do i need to know about the max config to fix this...

Well, I believe the answer is nothing.

An Ascend MAX will always include the NAS-Port attribute, unless it is not
applicable - for instance in an Accounting-On message or when the connection
is not associated with a physical port (a virtual or tunneled session).

You might also want to ask your RADIUS server vendor if these are really
error messages or just informational messages.  Keep in mind that the RADIUS
Accounting RFC states that the NAS-Port is not a MUST.

   RFC 2139  RADIUS Accounting

   SHOULD    This word, or the adjective "recommended", means that there
             may exist valid reasons in particular circumstances to
             ignore this item, but the full implications must be
             understood and carefully weighed before choosing a
             different course.
   ...
      Any attribute valid in a RADIUS Access-Request or Access-Accept
      packet is valid in a RADIUS Accounting-Request packet, except that
      the following attributes MUST NOT be present in an Accounting-
      Request: User-Password, CHAP-Password, Reply-Message, State.
      Either NAS-IP-Address or NAS-Identifier MUST be present in a
      RADIUS Accounting-Request.  It SHOULD contain a NAS-Port or NAS-
      Port-Type attribute or both unless the service does not involve a
      port or the NAS does not distinguish among its ports.

If you think something else is going on, you will need to tell us what the
software version and load on the MAX is, and you will need to include a dump
of the RADIUS message.

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>