Kostas Kalevras <kkalev@noc.ntua.gr> wrote:
What we don't want to happen is for the *NAS* to mark the *proxy* radius dead because one home proxy is not responding.
Exactly.
We set retry_delay * retry_times * number of home servers < retry_delay * retry_times on the NAS so that we can mark home servers and realms dead *before* the NAS marks the whole proxy radius service dead (which we want to avoid except if the proxy service itself is not available). How can we achieve a similar setup in synchronous mode?
By setting a "mark proxy dead after X seconds" configuration option. But the proxies retransmission timers for packets are not the same as the above configuration. That configuration item will have to be added, of course, and some code changed. But having the proxy originate packets at various intervals is not a good idea. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog