problem passing radius authentication.

[eduardw]

Hi All
We have a small problem with to vsx firewalls running on 2 different clusters (vsx ngx scalability pack). The firewalls are on the outside of the dmz.
Users on routers on the internet are trying to authenticated on radius servers in the dmz. But only 1 out of 4 attempts is successful.
A tcpdump on both the interface of the firewalls shows 4 incoming session from the internet and only 1 leaving the firewall going to the radius server.
We do not see any drops relating to this problem.
In an other part of our network we have a radius server behind an “normal”checkpoint standalone firewall (NG ai) with no problems.

Any ideas?


Kind Regards

Eduard

[chillyjim]

You may want to try some "fw monitor"'s to see where the packets are being lost. You can perform them at the VS level.

[eduardw]

Thanks I will try that.