Hi Lalith, If you are running SBR HA 5.5, you can use: "ShowSessions.sh -c" in /opt/hadm. If you are running SPE or GE/EE, there is a limit to the number of sessions that can be returned (10,000) and no way to get a count of how many sessions there are. Please be aware that SBR 5.x has been EOL for over 3 years and SBR HA 5.5 just reached EOL. It is strongly recommended to upgrade to SBR Carrier. Cheers, Scott ... View more

If you are running 6.1, then you can check current sessions in the SBR Admin GUI - Reports section...as Raveen mentioned. ... View more

If you are using SBR Carrier you can use the script ShowSessions.sh, located in /opt/JNPRhadm -c will give you the count of current sessions -a will print out all current sessions - be careful as this can put a huge load on the DB if there are a large number of sessions. you can also specifiy an ip address (or range) or session key to get a specific session ... View more

Can you post the packet details? This message is a bit strange: "Statistics attributes included in packet that is not an accounting STOP" You may have some bad formated radius packets. There are scripts in the /opt/JNPRHadm directory to clear out the CST table, if that is really what you want to do. You can use the DelSession.sh script: DelSession -a Please be careful as this will remove ALL sessions from the table. ... View more

That's Overburdened ;) ... View more

A standalone client is software that lets you send radius auth and acct requests to a radius server. You can use it to quickly and easily test the radius server. Do a google search on "radius test client" ... View more

Got it. Please try a stand alone client....not another switch ... View more

Please try using a test client to authenticate the user against the SBR system. If SBR works with the test client, then we know the issue is somewhere else. Can you tell me the JTAC case number, so I can have a look at it? ... View more

To open a JTAC case you need a valid support contract and valid username/password to access the support site. ... View more

If you look at the list of Authentication Policies, there should be 2 list boxes. One has a list of available choices and the other has those that are active. In the active list, you can also change the order they are checked. Again - the best thing to try is a test client to verify the general SBR radius functionality is working correctly. Then try with the switch. Cheers, Scott ... View more

Hi kronicklez, The user creation looks fine. Can you verify that Native User is active in the list of Authentication Policies? The other thing I would suggest is using a radius test tool to try and verify the username/password. That way you can isolate the SBR functionality. Using the test client you can confirm the functionaly of SBR and that the user/password are ok. You can find free radius test clients on the net - just google them. Cheers, Scott ... View more

Hi kronicklez, It is clear that they system is trying to verify the username/password against SBR, so the configuration on the switch seems ok. To confirm, is 192.168.1.36 the address of the EX4200? SBR is saying it got the request, but can not find the user HARRIS with the same password that was sent to it. Usually that is because the user was not created in SBR or the passwords do not match. Can you send a screen shot of the SBR admin GUI, native user section? It might be good to open a JTAC case, so we can track this and get the data easier. Cheers, Scott ... View more

Hi kronicklez, By "client", I mean what ever system that is trying to connect the user. You have to be sending the username/password from somewhere. Make sure the password being sent is the same entered in the SBR Admin GUI, when you created the user account. Have you tried more then one username/password combination? Cheers, Scott ... View more

Paul, Have you confirmed the user name and password are the same in SBR and the client? The SBR is clearly checking for the Native user, but is not finding a matching name/password. 01/17/2011 09:35:37 Authenticating user HARRIS with authentication method Native User Please double check the user is created in the Native Users section of the GUI and that the password is the same. ... View more

That is correct. Javascripting is not supported in the EE edition. Javascripting lets you write your own javascripts to perform any actions that you require. This may be useful to do processing that is not built in to SBR, to access some outside data or anything else that you can think of. ... View more

Hi Raja, This message indicates that your system is getting more authentication requests then it can handle. Either there was a flood of requests and the system was overloaded or your network is generating more requests then the system is configured to handle. If the message does not go away after a while, it might also indicate some other system or memory problem. What version of SBR are you running? Check the documentation for information about setting the threads to handle these requests. What you want to check on adjusting are: Max-Acct-Threads = X Max-Acct-Floods = X Max-Acct-Threads-In-Flood = X If you thread counts are high, you probably also want to set: WorkerThreadStackSize=128000 - this reduces the meory used by the OS for threads **for UNIX system Cheers, Scott ... View more

Hi Dung, This is getting to the point that it would be better to open a JTAC case. We need to look at your radius log file and the config files to see what is going on. I would suggest turning debug/trace to level 2 - then make sure the radius packet contains the new value "Test-Service" and that it is being decoded correctly. Also make sure the test client is sending a value for Test-Service. Did you modify the packet that the test client is sending to include this attribute? Cheers, Scott ... View more

Hi Dung, What version of SBR 6.1 are you using? What do you mean by "vendor" accounting? You can turn on accounting for the system by editing the account.ini file and changing enable = 0, to enable = 1. This will have SBR start logging accounting data locally. In this file you can also control what radius attributes are written and what type of radius messages are logged. Cheers, Scott ... View more

Hi Meryem, There is no official trouble shooting guide - it really depends on each specific problem. Always best to check the SBR logs and set the log level to 2, during trouble shooting. For maintenance, the main thing is to monitor the logs files to ensure you do not use up the disk space. You can also configure the logs sizes and amount of time to keep them around from the admin GUI. If you have more specific questions, I would suggest starting a new thread for each. Cheers ... View more

Hi Kisito, All SRC tech docs are on the website at: Software: http://www.juniper.net/techpubs/software/management/src/ Hardware: http://www.juniper.net/techpubs/hardware/c-series.html Cheers ... View more

SBR HA 5.5 is not supported on Solaris 9. It is also EOE and almost EOL. EOE is 07/09/2009 EOL is 07/09/2010 If you want to run on Solaris 10 - you will need to upgrade to SBR Carrier 7.2 ... View more