On Wed, Oct 9, 2013 at 3:41 PM, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:

While we have 900 switches doing mac and 802.1x based auth, we can have 6000+ users on our wireless network all authenticating to RADIUS via 3 RAS clients. Looking at the back end server log files, it does look as if, in general, all wireless RADIUS auths head for the same back end server.

I was wondering if there's a way off having a bit more granularity in terms of how the f5 load balances incoming RADIUS requests.

Have you asked F5?

At the very least, common load balancers (e.g. "keepalived" on linux, a frontend for ipvs) should have the option of distributing traffic to backends based on source IP. Since you say you have 3 RAS clients, it should work somewhat.

Fajar