No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

The Network Adapter of the SIG Back-End Server Cannot Receive Mirrored RADIUS Packets

Publication Date:  2019-07-03  |   Views:  452  |   Downloads:  0  |   Document ID:  EKB1002062986

Contents

Issue Description

RADIUS packets are mirrored to a network adapter of the SIG back-end server through a switch. However, user login information cannot be displayed on the SIG.

Handling Process

1. Connect the server to a PC through an Ethernet cable and get the head of packets. RADIUS packets on port 1813 are found in the packet  result.
2. Connect the network cable to the network adapter of the server. Run the tcpdump command in the Linux system to get the head of packets. It is found that no packet is received. This indicates that the network adapter does not receive packets.
3. After the check, it is found that in the Linux operating system, the network adapter receives mirrored packets in listening mode. In this case, set the network adapter mode to promisc. For example, to configure eth0 to work in promisc mode, run the following command:
sa-server-0:/ #ifconfig eth0 promisc
Run the following command to verify that the network adapter works in promisc mode:

sa-server-0:/ # ifconfig eth0
eth0      Link encap:Ethernet  HWaddr 60:DE:44:75:11:3A
          inet addr:192.168.237.2  Bcast:192.168.237.63  Mask:255.255.255.192
          UP BROADCAST RUNNING PROMISC MASTER MULTICAST  MTU:1500  Metric:1
          RX packets:4761788 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2080193 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6152916026 (5867.8 Mb)  TX bytes:231278912 (220.5 Mb)
The result shows that the eth0 network adapter is working in promisc mode. Then there are users going online on the SIG, and services are normal.

Root Cause

The packets fail to arrive at the network adapter of the server, or the network adapter of the server cannot receive packets.

Suggestions

This configuration is a working mode of the operating system for the network adapter. During the delivery of the SIG, the RADIUS proxy component often needs to run in listening mode. When using an empty-configuration network adapter to receive mirrored packets, pay attention to the network adapter mode. It is recommended that this note be incorporated in the configuration manual.