Wireless Access

Hi all,

Seen a issue as we have two controllers at the site and both are running as local and version

ArubaOS (MODEL: Aruba6000), Version 6.3.1.5.

We have multiple radius servers configured on both the controllers.

For one of the radius server which is getting reset frequently in controller A.

Would someone please suggest how to troubleshoot this issue for frequent radius disconnection issue , though both controllers are in same location.

the reachability is also fine from them.

Other radius servers are not getting reset.

Problematic server:--

In controllerA:---uptime as 0:7:23  
(ControllerA) #show aaa authentication-server radius statistics | include Radius1
Radius1     0        4085    0       0        0          0            0             0         48     323   0         3682    0        128    125         4085    4053     0       0:7:23  255/255

--------------------
non problematic:--

In controllerB:---uptime as 1:16:4
(ControllerB) #show aaa authentication-server radius statistics | include Radius1
Radius1     0        1193028   0       0        0          0            538           0         29339    448864   0         712967    0        8520    117       1193028   1191708   0       1:16:4   255/255

Do you have one or two servers in a server group?

Do you have "fail through" enabled in that server group?

What kind of radius servers are they?

There are four servers in a group and fail over is configured.

Those are windows based server.

And i saw requests are directed to another server in the group mostly.

Is there any process to check the connections for the radius server.

and the key and ip , all configurations are same on both the controllers.

In logs, authmgr, i didnt see any logs for this radius server.

- There is no fail-over.  Only fail through.  Fail through allows a user who has failed authentication on one server to query the others.  This is only intended if all 4 servers are from different domains and all need to be queried.  If they all  are in the same domain, "fail through" should be unchecked because it wastes resources authenticating to 4 other servers that are going to say "no" anyway.

- The "Diagnostics" tab has a AAA test server menu item that allows you to check authentications to servers.

j

ok but its not the problem of authentication. its disassosiation of the radius server and i donot see any logs though.

Which server is having the problem?  Put that single server in the server group by itself and see if the problem continues.