Community discussions

MikroTik App
 
mike999
just joined
Topic Author
Posts: 3
Joined: Tue Jun 29, 2010 10:09 pm

Freeradius reply

Tue May 17, 2011 12:03 am

Hi,

I have a Freeradius2 server and a RB411U NAS with RouterOS 4.11. If authentification is accepted on freeradius, reply are working fine but if the authentification is refuse, reply-message are not receive by the NAS . The log in the NAS always told me login fail : Radius server not responding when freeradius (in X mode) show me :

Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 19 to X.X.X.X port 56837
Reply-Message = "Your maximum usage time has been reached"
Waking up in 4.9 seconds.
Cleaning up request 0 ID 19 with timestamp +8
Ready to process requests.

At first, it was behind nat so I gived a public IP address to the NAS and it's still the same. The NAS have no firewall and the firewall accept everything coming from the NAS at destination of the radius server. The radius incoming on the NAS are enable. I tryed it with port 1700 and 3799. Could somebody help me on this.

Thanks.
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Freeradius reply

Tue May 17, 2011 12:12 am

Delaying reject of request 0 for 1 seconds
That means that the RADIUS server is going to wait for 1 second after receiving the request.
The default timeout on ROS is 100ms (http://wiki.mikrotik.com/wiki/Manual:RA ... Properties), so if it doesn't receive a reply in under 100ms it will not consider it part of an answer. So you can either retrain FreeRADIUS to not wait one second, or set the timeout in ROS to more than 1 second.
 
mike999
just joined
Topic Author
Posts: 3
Joined: Tue Jun 29, 2010 10:09 pm

Re: Freeradius reply

Wed May 18, 2011 4:47 pm

I didn't find how to disable freeradius delay but change the ROS timeout at 1100 ms and it's working fine.

Thanks for your help.
 
austinNz
just joined
Posts: 7
Joined: Tue Sep 21, 2021 7:54 pm
Contact:

Re: Freeradius reply

Fri Apr 19, 2024 3:10 am

I didn't find how to disable freeradius delay but change the ROS timeout at 1100 ms and it's working fine.

Thanks for your help.
Yeah i too adjusted the timeout to 1000ms
/radius set [find where 1]  timeout=00:00:01
, i no longer get the radius is not responding error logs

Who is online

Users browsing this forum: Bing [Bot], pietroscherer and 28 guests