[vandavauk]

We are having the same issue as well on two different clusters. It started after going to R62 back in August. Currently I am working with Nokia to pin down the issue.

To reiterate the issue:
Users quit getting the popup prompt for authentication, and eventually the session times out and they get a page not found error. All other traffic passes fine. If the same user tries to get to a site that does not require authentication it works fine. If a user is already authenticated when the issue starts, they continue to work fine.

It can be anywhere from a few days to a month before it happens, and it starts with just a few people and then starts to grow rapidly. A “push”, fail over or reboot temporarily resolves the issue.

I have checked memory, CPU and disk usage and I/O on all devices involved (including the Radius server) for any anomalies. Nothing seems to be out of the ordinary. It can happen at times of high traffic or low. I just can’t find any corresponding triggers and nothing is showing up in the logs.

At this moment I am running a continuous capture on our radius server and the next time it happens I hope to prove weather the firewall quits asking, or if the radius server quits replying.

I will post anything new I find…
-Doug

Just an FYI:

Our setup is:
Two clusters running at different locations.

An IP560 (Diskless) cluster (Utilizing VRRP to cluster) running IPSO 4.1 Build 28 and R62 build 620.

An IP380 cluster (Utilizing VRRP to cluster) running IPSO 4.1 Build 28 and R62 build 620.

For Authentication: Funk (now Juniper) Steel Belted Radius