(ASCEND) New Problem
owner-asc...@max.bungi.com
I have a user who's radius profile looks like this:
username Password = "xxxxxxx"
User-Service = Framed-User,
Ascend-Send-Auth = Send-Auth-CHAP,
Ascend-Send-Secret = "xxxxxx",
Framed-Address = 204.143.70.241,
Framed-Netmask = 255.255.255.240,
Ascend-Idle-Limit = 1800
He is connecting to an Ascend TS with an Ascend P50. What seems to be
happening is that his static route is not being created on the TS every
time he logs in and he is unable to route.
Any ideas?
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-use...@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
owner-asc...@max.bungi.com
> Ascend-Send-Auth = Send-Auth-CHAP,
> Ascend-Send-Secret = "xxxxxx",
>He is connecting to an Ascend TS with an Ascend P50. What seems to be
>happening is that his static route is not being created on the TS every
>time he logs in and he is unable to route.
>
>Any ideas?
Are these two lines nescecary?
the "send" authentication info doesn't make sense
for a dialin connection (the ascend only auths one-way)
maybe the Max is not seeing the framed address/mask because of them,
see what happens if you move them to the bottom of the profile
or remove them entirely.
-Jim H
----
Jim Howard Sr Network Engineer Lyceum Internet
jho...@lyceum.com http://www.lyceum.com/ 404.248.1733
My PGP Public Key: http://www.lyceum.com/~jhoward/pgp-key.txt
Fingerprint: 7E8B E2BA 1314 2535 CB08 CFF9 119B 7CD3 2488 954D
owner-asc...@max.bungi.com
This is the same problem that I was trying to deal with a few months ago...
We still have the problem now and then...
>When he connects, have you verified this suspicion by checking the routing
>table?
>Are other users able to connect OK?
>What does the P50 end look like?
Firstly, in our case, there "appears" to be an entry in the routing table
on the Max. Secondly, this only appears with users that require a static
IP. Lastly, its not exclusive to P50 users....
This is what we have for a radius user-entry:
Username Password="xxxxxxxxx"
Framed-Protocol = PPP,
Framed-Address = 207.194.216.xx,
Framed-Netmask = 255.255.255.255,
Framed-Route = "207.194.217.nn/mmm 207.194.216.xx 1 n"
If routing is failing (ie, nothing goes past the Max), and I do a manual
creation of the route on the Max, all is fine and generally stays that way
until I have to power down the Max -- at which point, all customer static
routes are gone...
This does seem silly and I'm sure there is something easy being missed
here....
---------------------------------
Jamie Penner
Nisa Internet Technologies Inc.
Nanaimo, BC Canada
EMail: jpe...@nisa.net
URL: http://www.nisa.com
Ph: 250-751-1111
Fax: 250-758-3511
---------------------------------
Thought for the day: "Do not meddle in the affairs of dragons, for you are
crunchy and taste good with ketchup..."
owner-asc...@max.bungi.com
>>At 09:34 PM 7/6/98 -0500, kevin wrote:
>>Well the TS isn't getting the static route because you are not specifying
>>it in the radius profile. Try adding this. (I'm doing this from memory,
>>so syntax may not be 100% correct)
>>
>>Framed-Route = "204.143.70.240/29 204.143.70.241 1"
>
>No, this is redundant. The information in his profile *should* add that
>route automatically.
Well this is the way we have always done it for our static IP customers,
rudundant or not, it works.
---
kevin
ISDN Support Staff kev...@flash.net
Flashnet Communications [Quake is law]
owner-asc...@max.bungi.com
>I have a user who's radius profile looks like this:
So this is an incoming profile...
>username Password = "xxxxxxx"
> User-Service = Framed-User,
> Ascend-Send-Auth = Send-Auth-CHAP,
> Ascend-Send-Secret = "xxxxxx",
The above two attributes are redundant as they are only used in out-dialing
profiles.
> Framed-Address = 204.143.70.241,
> Framed-Netmask = 255.255.255.240,
This should add the route "204.143.70.240/29 204.143.70.241 wanXX" - are
you not
seeing this when he connects?
> Ascend-Idle-Limit = 1800
>
>He is connecting to an Ascend TS with an Ascend P50. What seems to be
>happening is that his static route is not being created on the TS every
>time he logs in and he is unable to route.
Is it possibly a config conflict between this radius setup and his P50?
Kevin Smith Ascend Communications...
Customer Satisfaction ...where Network Solutions never end.
owner-asc...@max.bungi.com
>>I have a user who's radius profile looks like this:
>> User-Service = Framed-User,
>> Ascend-Send-Auth = Send-Auth-CHAP,
>> Ascend-Send-Secret = "xxxxxx",
>> Framed-Netmask = 255.255.255.240,
>>
>>He is connecting to an Ascend TS with an Ascend P50. What seems to be
>>happening is that his static route is not being created on the TS every
>>time he logs in and he is unable to route.
When he connects, have you verified this suspicion by checking the routing
table?
Are other users able to connect OK?
What does the P50 end look like?
>Well the TS isn't getting the static route because you are not specifying
>it in the radius profile. Try adding this. (I'm doing this from memory,
>so syntax may not be 100% correct)
>
>Framed-Route = "204.143.70.240/29 204.143.70.241 1"
No, this is redundant. The information in his profile *should* add that
route automatically.