Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

What is Ipak?

0

0

Article ID: KB6242 KB Last Updated: 02 Jul 2010Version: 3.0
Summary:
What is Ipak?
Symptoms:
auth_tel_hook: could not get an ipak(1) Trying to authenticate for a Radius authenticated session
Solution:

"Ipaks" are memory buffers used to process authentication for FTP, Telnet & HTTP sessions through the NetScreen device.

In ALL NetScreen Screen OS platform releases (3.10rx - above & below),  there are 2 types of "Ipak" values used:

1)small Ipaks - used for FTP,Telnet & HTTP service authentication (total of 3072)
2)large Ipaks - used for Telnet & HTTP authentication only. (total of 256)


Using the CLI command, "get Ipak", you can view the 2 memory buffers (0: & 1: - note 3: to 15: are NOT currently used) that are used to store # of Ipaks in use:

Below is an example of a "get Ipak" capture on an NS100 running OS 2.61r7.

ns100-> get Ipak
INT_PAK_NUM 3072:                         -------> 3072 total small Ipaks
 0:3051      1:  21      2:   0      3:   0        ie. 3051 free small Ipaks, 21 in use small Ipaks
 4:   0      5:   0      6:   0      7:   0        FTP: uses small Ipaks only
 8:   0      9:   0     10:   0     11:   0        Telnet and HTTP use small and large Ipaks. 
12:   0     13:   0     14:   0     15:   0        
                                                   
                                                        
                                                          
INT_LPAK_NUM 256:                                --> 256 total large Ipaks
 0: 248      1:   8      2:   0      3:   0          ie. 248 free large Ipaks, 8 in use large Ipaks. 
 4:   0      5:   0      6:   0      7:   0         if all small Ipaks are in use, ftp 

 8:   0      9:   0     10:   0     11:   0         telnet and http may fail.  If all large Ipaks are in use,
12:   0     13:   0     14:   0     15:   0        ftp may still work, telnet and http  will fail

In general, depending upon the availability state of the Ipak buffers, small Ipak - total 3072 & large Ipak 256,
Should the small Ipak & large Ipak buffers become "full" or "unavailable" - NO further FTP, Telnet & HTTP service authentication
can be performed UNTIL the Ipak buffers are "free" or "available".


Therefore, in cases where FTP, Telnet & HTTP authentication fails, "get Ipak" counter statistics may come in handy in
determining whether or not an small or large Ipak limitation has been met on the NetScreen device.

Here is the problem or goal:

  • auth_tel_hook: could not get an ipak(1)
  • Trying to authenticate for a Radius authenticated session
  • What is ipak?

Applicable Products:

  • NetScreen-5
  • NetScreen-5XP
  • NetScreen-5XT
  • NetScreen-10
  • NetScreen-25
  • NetScreen-50
  • NetScreen-100
  • NetScreen-204
  • NetScreen-208
  • NetScreen- 500
  • NetScreen-1000
  • NetScreen-5200
  • NetScreen-5400

Applicable ScreenOS:

  • 1.64
  • 1.65
  • 1.66
  • 2.00
  • 2.01
  • 2.10
  • 2.50
  • 2.6.0
  • 2.6.1
  • 2.7.1
  • 2.8.0
  • 2.8.1
  • 3.0.0
  • 3.0.1
  • 3.0.2
  • 3.0.3
  • 3.1.0
  • 4.0.0
  • 4.0.0-DIAL
  • 4.0.1


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search