Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SBR] Proxy accounting failure because it always requires at least 1 regular target in the .pro file

0

0

Article ID: KB21168 KB Last Updated: 04 Mar 2017Version: 3.0
Summary:
When configuring proxy realms or proxy lists, you must have at least 1 regular target in a .pro file. If not, you will get failure messages in debug logs.

This was found in SBR Carrier 7.3.0 and 7.2.4 and is most likely in all versions of SBR SPE/Carrier.
Symptoms:
When configuring proxy realms and proxy lists, if you do not have 1 regular target in a .pro file that also specifies a StaticAcctRealms target, you will get failure messages in debug logs.

All proxying is done correctly, but SBR expects 1 regular target in the .pro file, so will output a failed message when handling the Radius packets.

Below is an example of the debug log at the end of processing a proxy list configured system. You will see the proxy messages sent to all proxy servers, but the overall result is a failure.

Example:
06/01/2011 16:35:37.300 (0069): CProxyRequest::SetTargetAndBuildRequest(): no pRequestTarget
06/01/2011 16:35:37.301 (0069): CProxyRequest::ExecForwardEx(): SetTargetAndBuildRequest() failed
06/01/2011 16:35:37.301 (0069): Proxy accounting for user test@radiustest.com from NAS 172.27.208.239 failed, but transaction recorded locally

Solution:
In all .pro files, you must have at least 1 server configured as a proxy target, even if you have StaticAcctRealms defined.

Bad Example:
[Acct]
Enable = 1
;TargetsSection = AcctTargets
RecordLocally = 1
StaticAcctRealms = DefaultProxyList
Good Example:
[Acct]
Enable = 1
TargetsSection = AcctTargets
RecordLocally = 1
StaticAcctRealms = DefaultProxyList

[AcctTargets]
proxyhost


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search