topic Re: Set the "Framed-MTU" Access Option for Radius Authentication in Aerohive Migrated Content

Set the "Framed-MTU" Access Option for Radius Authentication

stefan_lechner — Thu, 12 Dec 2019 20:41:36 GMT

Hello,

one of our Leased-Lines does not carry Packets grater then 1350 bytes.

So i have the Problem that the Radius Challange from our Radius Server cannot reach the AP.

Do i have any Chance to set the "Framed-MTU" Radius-Option on the Access Point, to tell the Radius Server that he should send smaller Packets?

P.S.:

As a Workaround i can set the MTU-Size from the mgt0 Interface on the AP to 1300. But i have to do that on any AP behind the Line.

Re: Set the "Framed-MTU" Access Option for Radius Authentication

samantha_lynn — Fri, 13 Dec 2019 00:10:24 GMT

We can set MTU in a few places within ExtremeCloud IQ (formerly HiveManager NG). You can set that under the Management options, which this page discusses under the Service Control section: http://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-management-options.htm?Highlight=MTU

You can set MTU per switch port if you're using one of our switches, which this page discusses under the Port Settings Parameters section: http://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-switch-ports.htm?Highlight=MTU

Or if you're using one of our Routers you can set that on the Routing policy as well: http://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-routing-policy.htm?Highlight=MTU

Does any of that sound like what you're looking for?

Re: Set the "Framed-MTU" Access Option for Radius Authentication

stefan_lechner — Fri, 13 Dec 2019 15:50:50 GMT

Hello Sam,

thanks for your Answer.

At the moment we use the Hivemanager Classic (and plan to migrate to NG on Prem).

Is there also an option to set the MTU Size?

Thanks for your help

Stefan

Re: Set the "Framed-MTU" Access Option for Radius Authentication

stefan_lechner — Fri, 13 Dec 2019 17:05:06 GMT

Hi...

i found this option in the Hivemanager Classic..

It's also in the Management Options Section.

When i set the "Enable TCP Maximum Segment Size" to 1300 the result in Config is:

forwarding-engine tunnel tcp-mss-threshold threshold-size 1300

But this doesen't seem to solve my Problem because the Packets doesen't go through an Tunnel.

When i set the MTU Size with his command "interface mgt0 mtu 1300" in the CLI

I can see in a Wireshark Dump that the AP set's the Radius Attribute "Framed-MTU" in the Access-Request to 1300.

Then the Authentication will work.

Is there any option to set the "interface mgt0 mtu 1300" via Hivemanager?

Thanks for your help

Stefan

Re: Set the "Framed-MTU" Access Option for Radius Authentication

samantha_lynn — Fri, 13 Dec 2019 22:57:38 GMT

I don't believe there is, but if you'd like to set that CLI command for the APs permanently, I would suggest creating a supplemental CLI object for that command, so it's preserved each time the AP is updated or rebooted. This guide reviews how to create a supplemental CLI object in HiveManager Classic: https://thehivecommunity.aerohive.com/s/article/How-to-create-a-Supplemental-CLI-in-HiveManager-Classic