Radius dead-time

Hi,
At one of our sites we regularly have problems that the access-points can't connect to the radius server in the central site. My collegue configured the aaa dead-time but this gave no difference.
This is the error message :
10:02:14 bstonw53 RADIUS-4-RADIUS_DEAD: RADIUS server 10.161.5.22:1812,1813 is not responding.
10:02:14 bstonw53 RADIUS-4-RADIUS_ALIVE: RADIUS server 10.161.5.22:1812,1813 has returned.
Within a second he claims that the radius server is dead en alive again .
We are pretty sure that the line is under heavy load but tried to resolve it with the aaa dead-time configuration.
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server radius rad_pmip
aaa group server radius dummy
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server dead-criteria tries 5
radius-server host 10.161.5.22 auth-port 1812 acct-port 1813 key xxx
radius-server host 10.161.5.21 auth-port 1812 acct-port 1813 key xxx
radius-server retransmit 20
radius-server timeout 20
radius-server vsa send accounting
Can somebody help me with the radius configuration ?
gr
wim

Have you looke over this doc:
http://cisco.com/en/US/partner/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml
I have seen this before... take a look at the radius server log. that shows alot more. Also do a debug on the ap and post what that shows.

Similar Messages

  • OSPF with ipsec VTI interface goes down before dead timer.

    I have a strange issue that OSPF will initially start working, hellos are exchanged both ways but then after about 3 – 6 hellos one of the sides stops getting them and the ipsec VTI tunnel drops on router A even before the dead timer reaches 0. Is this default behavior, when OSPF is over a VTI interface if it doesn’t receive hellos is drops the tunnel?
    I’m at a loss as to what is going on since it looks like only one neighbor stops receiving hellos, router A, for a brief period of time. This VTI tunnel is going over another provider’s FW and they have assured me the tunnel destination/source ips are wide open they also sent me the ACL and I can verify this. The weird thing is if I enable EIGRP it works great with no issues. On router B I am using the same source/ip unnumbered  interface on multiple VTI tunnels to to other destinations but this shouldn’t cause any issues I don’t think. I have never had an issue like this and from what I can tell the router A just stops briefly getting hellos after 3 – 6 initial hellos and drops the protocol on the VTI interface. If I set the dead timer on router A long enough it will stop receiving hellos but stay up and then after a while you get “LOADING to FULL” as the hellos start coming in again.  Again the tunnel goes over a cisco 800 which I have no control over it and a potential FW before that but I saw the ACL and ip is being allowed. I was thinking this could be a trolling issue on the FW but it doesn’t explain why EIGRP works.  FYI I was having a recursive routing issue before but I have since fixed that and the issue still continues.
    ********  it turns out that i was using the same source ip on multiple tunnels. IPsec would get confused with packets coming in and would deliver packets to the wrong tunnel interface. This was solved but using the key command with a different key number on each set of tunnels with the shared profile command
    "If more than one mGRE tunnel is configured on a router that use the same tunnel source address, the shared keyword must be added to the tunnel protection command on all such tunnel interfaces. Each mGRE tunnel interface still requires a unique tunnel key, NHRP network-ID, and IP subnet address. This is common on a branch router when a dual DMVPN cloud topology is deployed. "
    Router A:
    router ospf 1
    router-id 10.213.22.2
    passive-interface default
    network x.x.97.26 0.0.0.0 area 0
    interface Tunnel1
    ip unnumbered GigabitEthernet0/1
    ip virtual-reassembly in
    ip tcp adjust-mss 1398
    ip ospf network point-to-point
    load-interval 30
    tunnel source GigabitEthernet0/1
    tunnel mode ipsec ipv4
    tunnel destination x.x.173.109
    tunnel path-mtu-discovery
    tunnel protection ipsec profile VTI-to-NB
    router B:
    router ospf 1
    router-id 172.17.2.6
    priority 1
    redistribute static subnets route-map Lan-static-RM
    passive-interface default
    no passive-interface Tunnel1
    no passive-interface Tunnel4
    no passive-interface Tunnel5
    network x.x.173.109 0.0.0.0 area 0
    network 172.17.2.6 0.0.0.0 area 0
    network 192.168.1.47 0.0.0.0 area 0
    interface Tunnel4
    ip unnumbered GigabitEthernet0/2
    ip virtual-reassembly in
    ip tcp adjust-mss 1398
    ip ospf network point-to-point
    load-interval 30
    tunnel source GigabitEthernet0/2
    tunnel mode ipsec ipv4
    tunnel destination x.x.97.26
    tunnel path-mtu-discovery
    tunnel protection ipsec profile VTI_NB_to_dorrance_prv
    end
    thanks P

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    I haven't studied your config, but I can tell you I have production environment using OSPF across VTI  (and GRE, and GRE/IPSec and DMVPN) tunnels without issue.  I.e. so OSPF can be okay with VTI tunnels.

  • How can I erase (or remove) the hard drive from a dead Time Capsule?

    How can I erase (or remove) the hard drive from a dead Time Capsule?

    I found this having had the same problem...
    http://forums.macrumors.com/showthread.php?t=553818
    Having removed the hard drive I'm finding I can't reformat it. I manage to mount the HD but Disk Utility crashes when trying to format (HD attached to Mac via Newer Tech. SATA cables to USB) and causes what I think is a kernal panic on my Mac which hard crashes. I see 3 partitions when attempting to mount one of which is AFP. Anyone got any ideas about how to do this? I've dug around but the only progress I've made is to note others have had to work around ACL's when replacing the logic board of the TC. Not sure if this even relates to the problem. However the tool for doing this seems to have been removed from SL. (Forum references to this procedure all relate to 10.5).

  • Data recovery on dead Time Capsule

    My Time Capsule died and I have files on it that I don't have else where. The Time Capsule is still under waranty, but if I have someone recover the disk for me the waranty will be broken and then I won't get a new one from Apple. Does anyone know if Apple can perform data recovery on a dead Time Capsule AND give me a new one or repair the broken one?

    How old is the TC?
    What model, A1xxx from the bottom if it?
    Apple are telling people to store files on the TC so ring them up and say you were using it as you were told and now it is broken, what are they going to do?
    They generally refuse to do more than swap to a new one.. the whole point of the TC is backup.. not file store.. so it has no way to backup and is considered a sealed unit.
    What is dead btw? On a recent one, a dead hard disk is going to require some work to get files out of, if at all.
    My advice would be to very carefully open the TC yourself and see if the TC works without the hard disk in it.. and plug the disk into a computer with usb to sata box.. you can get some recovery software if the disk does work.. otherwise it needs to go to a data centre. Then put it all back into the TC.. seal it up again.. and present it for replacement.. !!
    http://www.ifixit.com/Device/Apple_Time_Capsule

  • How do I get rid of dead time at the beginning of the song without messing with the timing of staggered entrances of various tracks/instrument?

    How do I get rid of dead time at the beginning of the song without messing with the timing of staggered entrances of various tracks/instrument?

    marykaymaas wrote:
    How do I get rid of dead time at the beginning of the song without messing with the timing of staggered entrances of various tracks/instrument?
    either Select All and drag to the left (turn on the Lock Automation menuItem if you have any automation curves)
    or
    use the Cycle Region to export the exact length you wish:
    http://www.bulletsandbones.com/GB/GBFAQ.html#exportexactlength
    (Let the page FULLY load. The link to your answer is at the top of your screen)

  • Generate complement​ary digital signals with dead time between each pulse and controlled by duty ratio

    I am to generate  two complementary digital signals using NI 9606 conected by RIO Mezannine Card to NI 9683 (Half Bridge DO).
    I am able to generate the signals but I am not able to put dead time between high and low signal and also, low and high signal.
    Requirement:
    (1) When the first signal goes high and the second signal goes low, there should be a controllable dead time.
    (2) Also when the second signal goes high and the first signal goes low, there should be a controllable dead time.
    I am able to do requirement 1, but I am unable to fulfill requirement 2.
    Please have a look at my VI and let me know how to go about satisfying requirement 2.
    Attachments:
    complementary test 2.vi ‏69 KB

    Hi Frank ,
    I have already taken note of the example Tannerite has provided  and have built my vi ( attached in previous post) surrounding that example.
    Now I require to control the PWM duty cycle as you can see from the vi using a knob and that control refers to both the signal 1 and 2.
    Now the signal 1 end and signal 2 generation requires a controllable dead time. Similarly, signal 2 end and signal 1 geneeration also requires another controllable dead time.
    I am able to do either one dead time at a time using delay but not two dead time simultaneously.
    I feel that I have two put the delays at the appropriate data flow point. I am working on that.
    I would really appreciate if you could give some insight on how to solve this dead time issue and generate two complementary waveform with dead times whose duty cycle can be controlled by a knob controller in fronty panel .
    I have also posted the required timing diagram for reference as suggested by Tannerite.
    Best regards.

  • How to introduce dead time in analog signals?

    Hi, I'm new to LabVIEW and I want to introduce a dead time in the analog signals that I have attached in this post. The time difference varies, so I could not introduce a time delay in the signal
    for instance, the attached waveform, i want the first signal to be seperated from the second signal. so i got 2 different signal at the end of the day for analysis. during the no signal time no signal is not recorded. 
    thanks in advance for all the help 
    Attachments:
    Time delay.JPG ‏37 KB

    Hi skydew,
                     It is possible to introduce a delay in an analog output. This is best done by specifying a trigger and then beginning the output when that trigger occurs.Below is a link to an example program developed for LabVIEW that waits a specified number of seconds and then triggers analog output to begin.I think this is what you mean as dead time.Take a look at this example and try to build from it for your code. If you have any further questions on this issue, let me know.
    Analog Input with Delayed Analog Output
    Also see some links below:-
    http://forums.ni.com/t5/LabVIEW/Finding-the-time-delay-between-two-signals/td-p/2125100
    http://forums.ni.com/t5/LabVIEW/calculating-time-delay-between-two-signals-aquired-from-DAQ/td-p/849...
    Thanks as kudos only

  • Dead Time Capsule: Power Off...No Response

    One more dead time capsule.
    18 months old.
    Power off... no response.
    Will never buy one again.

    Another One!!
    I purchased a time capsule in April 2008
    This time capsule stopped working about 2 weeks ago and I took it to the Apple Service Centre
    As the product is out of warranty I was told I need pay rmb200 to have it looked at. This was not a problem but 4 days later I was called and told they cannot do anything with the product as they are unable to open the unit and my only option was to buy a new one. After getting less than 2 years use out of the unit I was not going to purchase a new one.....
    It amazes me that after 2 years I cannot get the unit repaired when it obviously only a problem with the power source as the drive is working OK (I ripped it out!) and why I get charged 200rmb by the service provider when they know they cannot do anything...
    This is simply a bad product and trying to get any contact in Apple to complain impossible!

  • Creating dead time for switching pulses

    dear all
       I want create some dead time for switching on the switches in a single leg in 3 phase controlled rectifier application. how can i create this dead time in labview for my switching pulses? and it should be in micro seconds. is it possible for dead time in microseconds? when i am using delay time i am getting the delay in milli seconds only.
    thank you.

    It depends on your hardware and your software. The standard Wait function in LV has millisecond resolution. Software timing is also dependent on OS latencies which can run to tens of milliseconds and occasionally much longer.
    Most (but not all) analog output devices can use hardware timing. Some (but surprisingly few) digital output devices can use hardware timing. The devices with hardware timing may be able to generate the signal you want but it depends on the clock speed and the buffer sizes. If your device has multiple counter-timers, you might be able to generate a delayed pulse. Most of the NI counter-timers work with timebases fo 10 to 80 MHz and would be fast enough.
    It might be safer for your switches to have the deadtime generated in hardware.
    Lynn

  • Is there a refund policy for dead time capsule?

    I have seen that at one time apple was replacing dead time capsules.  Is apple giving any incentive to those that die to purchase future products?  Would I be wasting my time taking it in to the Genius Bar?
    I know it's dead.  No light, no fan, nothing.

    There was extended warranty for the first 6months worth of production.. and that is now closed as all products from 2008 have now passed 3years.. there is no discussion beyond 3years.. it is not designed to last longer.. that is for sure.
    If you have applecare on a computer it covers the TC that is less than 3years.. if so Apple will exchange it.. no file recovery.. too bad for anything lost!!
    Sometimes if you sweet talk and buy loads of Apple products.. and the genius is in a good mood and the wind is in the west with waxing moon, they will replace it. Purely out of random pity perhaps. Even a genius must have occasional pangs of conscience.
    Overall they will offer you a new one, at somewhat above retail, and take your old one.. to be safely disposed of.. most people do not fall for this. You can tear it open and pull out the hard disk yourself for nothing.. and not give Apple money.. to take your dead TC which they can then refubish and sell or use for people who are still under warranty.
    You can also repair it.. or have it repaired. Repairs can be very cheap if you have some mechanical basic soldering skills.

  • How to erase a dead Time Machine: Necessary? If so, how?

    Are Time Capsule Time Machine backups encrypted by default, and if not, how can I erase the Time Capsule if the power supply is dead?
    Details:
    I bought one of the early Time Capsules (1 GB) two years ago, and it finally died. It just wouldn't light up or start. Presumably, this is due to the well-known early power supply issues, and presumably the hard disk is still in good shape.
    I brought it to my local Apple store, and they were great. Although I do not have Apple Care, due to the design flaw with these very early units, they said they will replace it with a refurbished unit for free. (Nice!) It will take a few days. Meanwhile, I have the old dead drive. It occurs to me that I have my whole life on that hard drive, and if someone were to be able to resurrect it and restore the backup to an empty Mac, they would have much information that they shouldn't have.
    Yes, I could drill through the case and into the drive, but I don't think Apple would then accept it as a swap. Yes, I could take a big magnet to it, but how do I know it's big enough? (I've been to some sites that claim hard drives are very hard to erase because they case protects them magnetically.)
    Someone I spoke with today reminded me that you need an overall disk password to be able to get to the data, and that is true when the HD is working right and you are logging on to the Time Capsule. But does that mean the data is (even lightly) encrypted, or is that just time Time Capsule firmware arbitrating access such that any barrier would go away if you could mount the disk physically?
    Any suggestions would be welcome.
    Thanks.

    Thanks. That's what I'm in the process of doing. I already opened the case, and I'm going to take the drive to work tomorrow where my IT department has an eSATA cable that I can use.
    I hesitated in doing this because I felt Apple would consider the case breached and say they couldn't take the unit in swap. However, I spoke with the Genius Administrator at my local Apple store today, and she told me that it is OK if I do that. She was very understanding that I would want to erase the drive before returning it. She just told me to make sure I return the unit as close to original as possible. I used a hair dryer to warm the bottom before peeling it off, and everything will go back together pretty perfectly.
    So, this is fully acceptable to me.
    Thanks.

  • Dead Time Capsule replaced by a refurb but now drops connection...

    Hi Guys,
    I took delivery of Apple's replacement for my dead TC with the fried PSU. Sadly it's only a refurb and I'm having problems maintaining a connection to it via my iMac. It's connected via Gbit ethernet and I can mount the TC and the USB back-up drive I have attached to it onto my desktop.
    All I'm doing is trying to copy back all the files from the back-up to get the TC back to where it was before it died. So far I've been doing this for 24 hours as the two drives both keep disappearing from the desktop.
    Is there something I can tweak to make these connect more reliably? If not Apple can have this back too. I just don't have time to continually troubleshoot Apple stuff right now.
    Cheers
    rich

    If it's not working, just send it back to Apple. It should work out of the box.

  • Erasing a dead Time Capsule

    My Time Capsule died last week due to a power outage or surge at my home. Fortunately I was covered under warranty, and got a replacement sent very quickly. I now need to return the old one.
    Does anyone know how to erase any contents of the old one for security/identity/privacy's sake before I send it back? It is totally dead, no lights, nada.
    Thanks!

    Your only option would be to physically remove the drive, place it in an enclosure, and erase it that way (assuming the drive works well enough). Removing the drive voids the warranty; whether Apple will accept it as a returned item in that condition, you'd have to ask them.
    I don't think I'd be particularly worried, though, about just returning it "as is". Apple certainly has a reputation to maintain, and allowing their techs to copy sensitive data off returned TC's is something they're surely pretty careful to avoid.
    Give them a call, express your concerns, and see what they have to say.

  • Ripped HD out of dead Time Capsule... will it work?

    Hi, like many other users here my Time Capsule power supply failed and now it's dead as disco. The repair quote seemed to be almost the price of the new one, and presumably the same design flaw will kill it again. So I took an executive decision to rip its hard drive out, Aztec style, and have now got it housed in a USB drive caddy. It mounts OK, and I've defined it as the TC disk.
    But I can't see my old backups in Time Machine. Is that because it's local rather than NAS? Do I have to put it in an NAS caddy to see the old files, or is there a way to access them?

    Is that because it's local rather than NAS?
    Probably.

  • Dead time capsule, partial fix but no thanks to Apple.

    I posted 3 weeks ago after finding time cap dead, no power etc. Calls to Apple did nothing as machine, 1TB at over £300 quid and 18 months old, was not covered by warranty and if I bought a new one I could not take out extended warranty unless I bought a computer to go with it!!!! Local Apple support couldnt fix and said Apple didnt allow them to open the box!!
    Anyway perusing shelves at PC world I found a CnM Docking station which is what it says and takes hard drives a bit like IPod dock. So opened up Time capsule and extracted HD, plugged in dock and connected USB. It works, well to a fashion, I can see and read and extract backed up files and it backs up normally. No wifi and the time machine display does not happen, but for £29! yes only £29 I have recovered my back ups and can carry on.
    RESULT!!!!!

    DaddyPaycheck wrote:
    Have you tried making a new network location?
    That's seems to have fixed it. I thought that I did create a new network setting for Airport, I guess that is why I didn't attempt to try it again. Thanks.
    Message was edited by: sculley

Maybe you are looking for