Steelhead Appliance

[m.kellner@ktr.com]

Riverbed Case#202322  - Radius Athentication trough a S-SH doesn't work after Upgrade to RIOS and RSP 7.0

[cgeary]

Could you confirm your case number(s) please? I'll follow up internally.

Chris

[m.kellner@ktr.com]

Hello Gustav, i see exactly the same! If Rsp is disable i have no problems.My Mobile users are not very pleased about that. I have an open case and on Monday we go to the next round. If we found new details or a solution i will update this post.

Please do the same if you can.

Cheers Mike

[Gustav_lind]

Hi Mike,

We have the same issue after recently deploying a Riverbed 5050 in our datacenter. The issue seems to be when the access point responds with the certificate over UDP port 1812. Depending on your certificate size the UDP packet might become fragmented.

After doing a dump of the traffic on the WAN and LAN side of our Riverbed we could conclude that the Riverbed unit actually forges the two UDP fragments into one(!). This creates a gigant frame (about 1656 bytes total in lenght with a 1024bit certificate) and causes a drop on the next hop switch.

We do not have any Packet Mode Optimization enabled and very few rules on what to optimize, the RADIUS traffic is not optimized. Have tried to include 1812 in the Interactive list and also created a pass-trough rule for all UDP traffic. Did not help. Will open case with Rivebed support now.

/Gustav

[m.kellner@ktr.com]

I have installed RIOS 7.0 with RSP 7.0 and any problems.

ON the WAN Side Firewall is a Wireless Network connected with 802.1x and EAP.

When RSP is enabled, the Wireless Accesss Points cannot connect proper to the Radius Server behind the LAN Side Interface of the SH.

A Case is open without results.

Mike

[-Tuomas-]

Hi all.

RiOS 7.0.0 has been out for some time now.

Has anyone found any strange issues from it?

Or is it safe to use.