Hi,   We are preparing to deploy a new SBR EE 6.1.7 in a RHEL VM. The simple installation & configuration ran smoothly up until I need to access the SBR Administrator, where we kept stumbled on "Error authenticating user" dialog box, while the log files showed "read access to URI '/' denied due to failed logon attempt" lines.   During the few first configurations I put the RHEL's root username as the initial admin user, and even the root has a valid password (confirmed by SSH), it can't be used to log in to the Administrator. I've tried to put other users during the configuration (with valid password) but it didn't work either. I've also tried to use the trial license alternatingly with the purchased license, but it made no difference.   I've done numerous SBR installations, both Carriers & Enterprise editions, but I don't recall stumbling to this kind of issue before. Did I miss something here? ... View more

Hi,   Recently our customer asked us to setup an SBR configuration in which the SBR will have to replicate some of  our proxied accounting requests and send them to a server which will only receive RADIUS accountings without having to reply with Acct-Response.   I've figured out to tackle this scenarion using Smart Static Accounting, but the problem is that the NAS clients will still have to get Acct-Response from the main proxy target, therefore preventing us from using the Block=0 configuration in the static realm .pro config file.   Using Block=1, in the other hand, will make the SBR wasted its resources for waiting accounting responses which will never come. Furthermore, I'm worried that the FastFail mechanism in the realm configuration will force the SBR to mark the static target as Down and stop proxying the accounting to it altogether.   Is it possible to omit the FastFail mechanism in some realms (without activating the default value in radius.ini file)? Can I achieve this by simply setting the FastFail MinFailures and ResetSeconds to 0 ?   Looking forward for comments & suggestions.   Thx. ... View more

Hi,   I have been preparing a Linux version of the SBR Carrier 7.5. in our customer for future project, but weren't given an access to the server other than indirect, multihop  SSH. In other similar condition in the previous versions, I could easily overcome this WebGUI restriction using LDAP Configuration Interface (LCI). But in this new one I haven't been able to connect to SBR's LDAP database. Everytime I try to do a simple ldapsearch, I've always got this "protocols not supported" error message, eventhoug I used LDAPv2 just like the user guide.     Is there anything I can do to get around this error?   Thanks. ... View more

Hi,   Just now I found out that the /var partition on our Solaris hosting SBR Carrier 7.2.4 has reached 100% capacity due to large core files located in  /var/core/ directory in the format of core_<hostname>_jnprsnmpd_<numbers>.   [email protected] # ls -lthr total 56712224 -rw------- 1 root root 4.0G May 16 16:33 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1337160612_25009 -rw------- 1 root root 4.0G Jun 1 04:00 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1338497846_17861 -rw------- 1 root root 4.0G Jun 17 23:30 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1339950465_28722 -rw------- 1 root root 4.0G Jul 13 06:18 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1342134962_20197 -rw------- 1 root root 4.0G Aug 2 15:23 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1343895621_29822 -rw------- 1 root root 4.0G Aug 18 21:30 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1345300058_1566 -rw------- 1 root root 3.1G Sep 3 19:00 core_SBRKO03-RADFE02_jnprsnmpd_0_0_1346673474_13203 [email protected] #       I suspected that these are core dumps from jnprsnmpd process, but I was hoping you guys can give more insightful information on them. What triggers the creation of these jnprsnmpd core files? Is it safe to remove it manually? Can we configure the jnprsnmpd process to automatically delete old core files?   Looking forward for your answers. ... View more

Hi, We have several SSR clusters deployed on our customer networks. In the "main" cluster we have a 7.3.1 cluster on which we have configured various thread settings in the radius.ini file according to the 7.3.1 documentations (Max-Acct-Threads, Max-Acct-Floods, Max-Acct-Threads-In-Flood, etc). Now we are faced with the needs to reconfigure the second POP cluster which is still on the 7.2.4 whose documentations only contain a single setting of Max-xxx-Threads. Does the 7.2.4 version have no other configurable settings (floods, etc)? Is it safe for us to copy the floods setting from the 7.3.1 radius.ini ? ... View more

Hi, Our customer has a pair of SBR Carrier 7.0 which are deployed deep inside a private network so we have no way to access their SBR Administrator GUI, therefore our only mean to access the database is through the LDAP configuration interfaces. Running basic ldapsearch command to retrieve the data works fine except on 1 item, a checklist of one of the profile which was configured with a default value, but appears in the query results as a IP-address which immediately followed with a "g" or "er" characters. These characters seem come up alteratingly everytime we run the ldap query. $lcisearch -b "radiuslist=check,radiusname=JUNIPER,radiusclass=Profile,o=radius" '' version: 1 dn: radiuslist=check,radiusname=JUNIPER,radiusclass=Profile,o=radius objectclass: top objectclass: check radiuslist: check nas-ip-address: %default% 192.168.0.1er dn: radiuslist=check,radiusname=JUNIPER,radiusclass=Profile,o=radius objectclass: top objectclass: check radiuslist: check nas-ip-address: %default% 192.168.0.1er $lcisearch -b "radiuslist=check,radiusname=JUNIPER,radiusclass=Profile,o=radius" '' version: 1 dn: radiuslist=check,radiusname=JUNIPER,radiusclass=Profile,o=radius objectclass: top objectclass: check radiuslist: check nas-ip-address: %default% 192.168.0.1g dn: radiuslist=check,radiusname=JUNIPER,radiusclass=Profile,o=radius objectclass: top objectclass: check radiuslist: check nas-ip-address: %default% 192.168.0.1g $ Note: lcisearch is an alias for 'ldapsearch -V 2 -p [port] -D "cn=admin,o=radius" -w [password]' ... View more

Hi, I wonder if there's any way to reset the statistics through the LCI which is as closely convenient as through the SBR Administrator GUI? ... View more