Wireless Access

last person joined: 12 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Radius Authentication

This thread has been viewed 4 times

  • 1.  Radius Authentication

    Posted Sep 24, 2012 02:45 PM

    We have two Radius servers configured on our controller. We are starting to see authentication attempts to our backup radius server, but our primary radius server is still up. From our troubleshooting it looks like attempts are going directly to the backup radius server.

     

    Aby ideas why ther controller would send authentication attempts to the backup server first?



  • 2.  RE: Radius Authentication

    EMPLOYEE
    Posted Sep 24, 2012 03:54 PM

    If it timed out, that would happen.

     

    Try this command to see the status of your radius servers.  An overloaded Radius server would do that.

     

     

    (Aruba-M3.arubanetworks.com) #show aaa authentication-server radius statistics 
RADIUS Server Statistics
------------------------
Statistics             Radius1    Radius-Server02 Radius-Server-03a  Radius-Server04  Radsrv
----------             -------    --------------  -----------------  ---------------  ------
Accounting Requests    0          0               0                  0                0
Raw Requests           0          0               0                  0                0
PAP Requests           0          0               0                  0                0
CHAP Requests          0          0               0                  0                0
MS-CHAP Requests       0          0               0                  0                0
MS-CHAPv2 Requests     0          486             0                  0                0
Mismatch Response      0          0               0                  0                0
Bad Authenticator      0          0               0                  0                0
Access-Accept          0          455             0                  0                0
Access-Reject          0          31              23                 0                0
Accounting-Response    0          0               0                  0                0
Access-Challenge       0          0               0                  0                0
Unknown Response code  0          0               0                  0                0
Timeouts               0          0               0                  20               0
AvgRespTime (ms)       0          8               0                  0                0
Uptime (d:h:m)         7:16:42    7:16:42         7:16:42            7:16:42          7:16:42
SEQ first/last/free    1/255/255  232/231/255     1/255/255          1/255/255        1/255/255

     



  • 3.  RE: Radius Authentication

    Posted Sep 25, 2012 05:48 AM

    Other two options that can cause such thing:

     

    1- there is a problem on the connectivity between the main Radius and controller. (e.g. check the main Radius configuration in the controller IP address/ key/ ports).

     

    2- You might by mistake placed the backup radius as the first radius server in the (Server_Group) verfiy the order of the servers in the group.