No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Radius server is down but the status in AC is still UP

Publication Date:  2017-04-01 Views:  150 Downloads:  0
Issue Description

Verified test-aaa user authentication. The authentication fails.

[AC6005]test-aaa USER PASSWORD radius-template RADIUS


Error: Account test failed.


Ping towards server fails too.

[AC6005] ping xx.xx.xx.xx    //IP address of the Radius server

PING xx.xx.xx.xx: 56  data bytes, press CTRL_C to break
Request time out

Request time out

Request time out

But display display radius authorization item template shows that the server is UP.

[AC6005-diagnose]display radius authorization item template RADIUS

Type       = auth-server

  State      = state-up

  AlarmFlag  = false
  STUseNum   = 1

  IPAddress  = XX.XX.XX.XX

  AlarmTimer = 0xffffffff

  Head       = 4130

  Tail       = 4129

  ProbeID    = 255


Handling Process

Radius server timers needs to be verified.

radius-server dead-count 4

radius-server dead-interval 5

Radius dead-count represent the number of requests that has to fail in order for the server to be displayed as Down.
The dead-interval is the checking cycle (in seconds).

So in this example the timers function like this:

-If at least 4 dead requests (dead-count) are recorded in 5 seconds (dead-interval) then the server status will become down (note that
there is the need to record 2 consecutive cycles in order to put it down).

-If the request are not enough (less that 4 authentication requests within 5 seconds) then the server will remain UP.


Root Cause

Incorrect timers set.


Adjust the timers and dead-counts according to the real number (approximation) of authentication requests. If there are few users, lower the dead-count and increase the dead-interval.