RADIUS packets are mirrored to a network adapter of the SIG back-end server through a switch. However, user login information cannot be displayed on the SIG.
1. Connect the server to a PC through an Ethernet cable and get the head of packets. RADIUS packets on port 1813 are found in the packet result.
2. Connect the network cable to the network adapter of the server. Run the tcpdump command in the Linux system to get the head of packets. It is found that no packet is received. This indicates that the network adapter does not receive packets.
3. After the check, it is found that in the Linux operating system, the network adapter receives mirrored packets in listening mode. In this case, set the network adapter mode to promisc. For example, to configure eth0 to work in promisc mode, run the following command:
sa-server-0:/ #ifconfig eth0 promisc
Run the following command to verify that the network adapter works in promisc mode:
sa-server-0:/ # ifconfig eth0
eth0 Link encap:Ethernet HWaddr 60:DE:44:75:11:3A
inet addr:192.168.237.2 Bcast:192.168.237.63 Mask:255.255.255.192
UP BROADCAST RUNNING PROMISC MASTER MULTICAST MTU:1500 Metric:1
RX packets:4761788 errors:0 dropped:0 overruns:0 frame:0
TX packets:2080193 errors:0 dropped:0 overruns:0 carrier:0
RX bytes:6152916026 (5867.8 Mb) TX bytes:231278912 (220.5 Mb)
The result shows that the eth0 network adapter is working in promisc mode. Then there are users going online on the SIG, and services are normal.
The packets fail to arrive at the network adapter of the server, or the network adapter of the server cannot receive packets.
This configuration is a working mode of the operating system for the network adapter. During the delivery of the SIG, the RADIUS proxy component often needs to run in listening mode. When using an empty-configuration network adapter to receive mirrored packets, pay attention to the network adapter mode. It is recommended that this note be incorporated in the configuration manual.