<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Ok, sorry. I explain below with more details:<br><br>-----------------------------------------------------------------------------------------------------------------------------------------<br><b>DESCRIPTION OF WORKLOAD PROBLEM WITH FREERADIUS PLATFORM</b><br><br> <b> I- OBJECTIVES</b><br> It was a project that was implemented for an ISP to authenticate, to authorize and to account their ADSL’s Subscribers.<br> The main objective is to integrate radius in the process of attribution of IP Address to ADSL Subscribers.<br><br> This integration can be described by the steps follows:<br><br> <b>Before integration of Radius Platform:</b><br> 1- The subscribers are queries the BAS to affect an IP address<br> 2- The BAS affects to this subscriber, an IP Address<br> 3- The subscribers are connected to Internet<br><br> <b>After integration of Radius Platform:</b><br> 1- The subscribers are queries the BAS to affect an IP address<br> 2- The BAS transfers these requests to Radius platform<br> 3- The Radius platform authenticates this subscriber. If he is authorized, the Radius starts accounting; if not, BAS denied access of this subscriber.<br> 4- When the authentication is on success, the BAS affects an IP Address of this subscriber<br> 5- The subscribers are connected to Internet<br> 6- Once subscriber terminates his connection to internet, the BAS send a request to Radius for stopping accounting<br><br><b> II- PROBLEM</b><br> There are three BAS. It’s Alcatel BAS SMS 1800.<br> All of subscribers are affected to one BAS as follow:<br> - BAS n°1: 8000 subscribers<br> - BAS n°2: 3000 subscribers<br> - BAS n°3 : 2000 subscribers<br> <br>After transferring a first BAS’s requests to a RADIUS platform, it’s work well.<br><b>But, after configuring a second BAS to transfer his requests, the radius platform started to work slowly.</b> The authentification process has become slow.<br><br><br><b>III- INTERNAL ARCHITECTURE OF RADIUS PLATFORM</b><br><br>There are eight virtual servers based on KVM:<br>- 02 authentication’s servers <br>- 02 accounting’s servers, <br>- each server has his own database server, so there are 04 database servers. It's Mysql 5.<br><br>Authentication and Accounting are configuring with Freeradius.<br><br><br><b>IV- LOGS AND CONFIGURATION</b><br><br> <b>1. Radiusd –X | tee log</b><br>It's very long. So i give it, to an another file. View the file attached radius-X.log.<br><br><br> <b>2. BAS’s Configuration</b><br>On each BAS, we have done this configuration:<br><b><i>context ISP<br>domain ISP_domain1<br>domain ISP_domain2<br>aaa authentication subscriber radius<br>aaa accounting subscriber radius<br>radius server IP_authentication_server1 key alcatel<br>radius server IP_authentication_server2 key alcatel<br>radius algorithm round-robin<br>radius accounting server IP_accounting_server1 key alcatel<br>radius accounting server IP_accounting_server2 key alcatel<br>radius accounting algorithm round-robin<br>radius attribute NAS-IP-Address interface cisco</i></b><br><br><br>Thanks a lot,<br>Guillaume Sigui<br><br><br><br><div>> Date: Fri, 14 Oct 2011 16:41:07 +0200<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: Workload in freeradius? platform<br>> <br>> siguillaume wrote:<br>> > Ok, thanks.<br>> > I give more details in the files attached.<br>> ...<br>> > *DESCRIPTION OF WORKLOAD PROBLEM WITH FREERADIUS.pdf* (291K) Download<br>> > Attachment<br>> <br>> I wish you were joking, but I'm sure you're not.<br>> <br>> As a hint, posting PDFs is rude. *NO ONE* else is doing it.<br>> <br>> Go read the documentation for how to ask sane questions.<br>> <br>> If you keep this up, I'll unsubscribe nabble.com, too. Very little of<br>> anything worthwhile comes from there.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div> </div></body>
</html>