I tried to login via SBR GUI (port 1812) but the request is refused whereas I can access via telenet using the same credential.
Is there anything need to do to enable access via GUI?
You might have to check what port is configured in radius.ini file.
If the configured port is 1812, check tcp connection status, if it is close_wait or inappropriate state, you will have to restart the process.
Following is the port section in radius.ini >
TcpControlPort = 1812
;TcpControlAddress = 220.127.116.11
SecureTcpAdminPort = 1813
;SecureTcpAdminAddress = 18.104.22.168
UDPAuthPort = 1645
UDPAcctPort = 1646
UDPAuthPort = 1812
UDPAcctPort = 1813
;UDPProxyPortBlockStart = 28000
;UDPProxyPortBlockLength = 64
As I'm already connected to SBR Administrator GUI, I guess tcp port is ok.
Somehow SBR is not accepting login credential by this way.
Seems to me that your credentials are incorrect or would have expired.
What Version and Edition of SBR are you running ?
What's the operating system the SBR is installed on ?
From when are you encountering this issue ?
It's SBR SPE v6.1 running on Solaris. Never tried to access via Web before but this time need to collect some reporting which is exclusive to GUI (Concurrent Session, etc.).
And I'm pretty sure that the credential I'm using is correct as I CAN login via Telnet.
I understand that the credentials that you provide is valid.
Could you confirm if you telnet that admin port as well ?
If not, please telnet including the port number and update.
[Eg: telnet 10.10.10.1 1812
telnet 10.10.10.1 1813 ]
Run ./sbrd status fro /opt/JNPRsbr/radius and see if the port is in close_wait or any inappropriate state.
While running telnet you could get snoop trace[ both at client machine and SBR installed server] and netstat -a output as well.
Also you may try restarting SBR process( if it is feasible) and see if that helps!
If restart doesn't help, you will have to open up a JTAC case.
You use the Administrators panel to grant the right to use the SBR Administrator to configure a Steel-Belted Radius Carrier server.
When the Steel-Belted Radius Carrier software is installed by root, that account is suggested as the default SBR Carrier Administrator account as well. That account has the right to use the SBR Administrator at its default (full) level of access.
The Administrators panel lists the users and groups on the server who have been explicitly granted the right to run the SBR Administrator._