Re: load balancing 802.1x auth requests



Message: 4
Date: Fri, 30 Mar 2007 09:04:40 +0200
From: Alan DeKok <aland@deployingradius.com>
Subject: Re: load balancing 802.1x auth requests
To: FreeRadius users mailing list
	<freeradius-users@lists.freeradius.org>
Message-ID: <460CB688.2060804@deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1

Alison Lee wrote:
We would like to load-balance 802.1X wireless authentications on multiple radius servers. The problem is that EAP methods require a series of requests and replies between the client and the same radius server, but a normal radius proxy will treat each request as a new one and forward them to different servers. With the latest release of FreeRADIUS, is it possible to keep states in the proxy server so that it can distinguish new requests from current outstanding requests?

  No.

  Coincidentally, though, I've been working on upgrading the server core
in preparation for 2.0.

  I *believe* it's possible to add that load-balancing of EAP as a
module.  Not as part of EAP, because other methods use State, too.  But
it looks to be pretty simple.

  If you're willing to run the CVS head, there may be this capability
next week.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog


Id be more than willing to help test this too :)

--
Arran Cudbard-Bell (ac221@sussex.ac.uk)
Authentication Authorisation & Accounting Officer
Infrastructure Services | ENG1 FF08
EXT:3900




This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.