Weird problem after switching off Idle Timeout & Keep Alive

RouterOS General
1

Hi, we were getting a lot of complaints from our customers, that they get logged out every now and then, so we asked our server developers to completely switch off the Idle Timeout and Keep Alive Timeout.

Now the customers dont get logged out at all, but a new problem has come up.

Now people complain that, they are not getting the login screen at all,and even if it comes, it says, radius server not responding.

In order to fix them, I have to delete their Mac entries from :
ARP
IP Hotspot - Hosts
DHCP Server - Leases
Ip Hotspot - Active


This is getting irritating now, as I have to do those 4 steps 5 times a day for some or other customer.

Why is it happening ?
Why is their session getting hanged or something ?
Whats the solution to this ?

2

Router model? RouterOS version? Routerboard firmware?

3

Latest firmware
CCR1009

4

Is that CCR1009 running user-manager as radius service or is it radius running on a seperate server?

5

Radius on a microtik server, different PC.

6

Looks like you’re experiencing either L2/L3 problems in CCR1009->Radius communication, or most probably your radius server is having issues.

7

the server is in my office only!

8

Can you please post a screenshot of running (run it then press q)

/radius monitor 0

(Assuming just one radius entry on the CCR1009)

9

Screen Shot 2015-07-20 at 3.44.03 pm.png

10

There’s some kind of problem with main CCR → radius communication.

It could be either network related (check logs), or user-manager related at the PC end.

Enable radius logging to disk on the “main” CCR and manager logging to disk on the PC. Enable interface logging to disk on both.

11

Enable interface logging to disk on both. How to do that ?

12

Paste this on a New Terminal:

/system logging
add action=disk topics=manager
add action=disk topics=radius
add action=disk topics=interface
13

Okay after doing this ?

14

Check Log on both routers, set the dropdown at the upper right corner to disk, have Radius server instance open (status tab) and look at the logs when any of Rejects, Resends, timeouts, Bad replies increase. Post the logs when that happens.

15

how do i enable idle timeout back ?

And can i keep the idle timeout switched off for specific users ?