Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 37 subscribers
  • Views 678 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Eduroam accounting

marc smith2

Does anyone use Eduraom with windows server nps and sohpos xg for accounting?

we are getting constant errors in the nps server logs to say the remote radius server (xg) has not responded to 5 consecutive requests and is marked unavailable and the network policy server discarded the accounting requests. the errors are intermittent so it seems the sophos is ok some of the time 

this is possibly why we are intermittently getting long waiting times when users connect to eduroam. what it is definitely doing is associating the wrong username to ip address so if ever we have had some dubious browsing we couldn't be sure it was the user the sophos logs say

we have the sophos added to the nps servers radius clients and remote radius servers. i've connected an interface from the xg to be used for just the nps servers. played around with the load balancing settings for timeouts but we are still having issues

i'm not sure if this was an issue in 17.5 and we just never noticed or if it is since going to 18.0.1



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    Could you please provide access_server logs and authentication server configuration detail from the firewall for further investigation?

    Thanks,

  • 0 in reply to FormerMember

    Hi, thanks for your quick reply

    the three radius servers are set up slightly differently as you will see with only having the one set up in the xg. this is because I was trying different things with each. I have tried the three radius servers individually as well.

    no idea why it's the same radius server ip address in the radius client log, unless that's because the wifi controller is sending all the accounting via one server

    ERROR     Sep 17 15:30:03 [access_server]: handle_radius_account_req: received radius accounting with status  3
    MESSAGE   Sep 17 15:30:03 [access_server]: handle_radius_account_req:  request received from radius client 172.20.3.72
    ERROR     Sep 17 15:30:03 [access_server]: handle_radius_account_req: received radius accounting with status  3
    MESSAGE   Sep 17 15:30:03 [access_server]: handle_radius_account_req:  request received from radius client 172.20.3.72
    ERROR     Sep 17 15:30:03 [access_server]: handle_radius_account_req: received radius accounting with status  3
    MESSAGE   Sep 17 15:30:03 [access_server]: handle_radius_account_req:  request received from radius client 172.20.3.72
    ERROR     Sep 17 15:30:03 [access_server]: handle_radius_account_req: received radius accounting with status  3

    ERROR     Sep 17 15:39:38 [access_server]: handle_liveuser_insert: SQLITE_REQ_INSERT_LIVEUSER query failed
    ERROR     Sep 17 15:39:41 [access_server]: (_sqlite_db_handle_get_liveuserinfo): GET_LIVEUSER_INFO_TO_LOGOUT found no entries for IP 172.20.25.78 (sqrs 101)
    ERROR     Sep 17 15:39:41 [access_server]: (handle_external_logout_req_finish_free): SQLITE_REQ_GETLIVEUSERINFO query failed
    ERROR     Sep 17 15:39:41 [access_server]: (_sqlite_db_handle_get_liveuserinfo): GET_LIVEUSER_INFO_TO_LOGOUT found no entries for IP 172.20.88.0 (sqrs 101)
    ERROR     Sep 17 15:39:41 [access_server]: (handle_external_logout_req_finish_free): SQLITE_REQ_GETLIVEUSERINFO query failed

Unfiltered HTML