auth_tel_hook: could not get an ipak(1) Trying to authenticate for a Radius authenticated session
"Ipaks" are memory buffers used to process authentication for FTP, Telnet & HTTP sessions through the NetScreen device.
In ALL NetScreen Screen OS platform releases (3.10rx - above & below), there are 2 types of "Ipak" values used:
1)small Ipaks - used for FTP,Telnet & HTTP service authentication (total of 3072)
2)large Ipaks - used for Telnet & HTTP authentication only. (total of 256)
Using the CLI command, "get Ipak", you can view the 2 memory buffers (0: & 1: - note 3: to 15: are NOT currently used) that are used to store # of Ipaks in use:
Below is an example of a "get Ipak" capture on an NS100 running OS 2.61r7.
ns100-> get Ipak
INT_PAK_NUM 3072: -------> 3072 total small Ipaks
0:3051 1: 21 2: 0 3: 0 ie. 3051 free small Ipaks, 21 in use small Ipaks
4: 0 5: 0 6: 0 7: 0 FTP: uses small Ipaks only
8: 0 9: 0 10: 0 11: 0 Telnet and HTTP use small and large Ipaks.
12: 0 13: 0 14: 0 15: 0
INT_LPAK_NUM 256: --> 256 total large Ipaks
0: 248 1: 8 2: 0 3: 0 ie. 248 free large Ipaks, 8 in use large Ipaks.
4: 0 5: 0 6: 0 7: 0 if all small Ipaks are in use, ftp
8: 0 9: 0 10: 0 11: 0 telnet and http may fail. If all large Ipaks are in use,
12: 0 13: 0 14: 0 15: 0 ftp may still work, telnet and http will fail
In general, depending upon the availability state of the Ipak buffers, small Ipak - total 3072 & large Ipak 256,
Should the small Ipak & large Ipak buffers become "full" or "unavailable" - NO further FTP, Telnet & HTTP service authentication
can be performed UNTIL the Ipak buffers are "free" or "available".
Therefore, in cases where FTP, Telnet & HTTP authentication fails, "get Ipak" counter statistics may come in handy in
determining whether or not an small or large Ipak limitation has been met on the NetScreen device.
Here is the problem or goal:
- auth_tel_hook: could not get an ipak(1)
- Trying to authenticate for a Radius authenticated session
- What is ipak?
Applicable Products:
- NetScreen-5
- NetScreen-5XP
- NetScreen-5XT
- NetScreen-10
- NetScreen-25
- NetScreen-50
- NetScreen-100
- NetScreen-204
- NetScreen-208
- NetScreen- 500
- NetScreen-1000
- NetScreen-5200
- NetScreen-5400
Applicable ScreenOS:
- 1.64
- 1.65
- 1.66
- 2.00
- 2.01
- 2.10
- 2.50
- 2.6.0
- 2.6.1
- 2.7.1
- 2.8.0
- 2.8.1
- 3.0.0
- 3.0.1
- 3.0.2
- 3.0.3
- 3.1.0
- 4.0.0
- 4.0.0-DIAL
- 4.0.1