Thanks, I put the update Load-Balance-Key right at the top of the authorize section in the ../sites-enabled/default... that seems to be working pretty well... I'll look more at the client-port-balance ... thanks, Robert ________________________________________ From: freeradius-users-bounces+robert.roll=utah.edu@lists.freeradius.org [freeradius-users-bounces+robert.roll=utah.edu@lists.freeradius.org] On Behalf Of Phil Mayers [p.mayers@imperial.ac.uk] Sent: Wednesday, March 23, 2011 3:47 PM To: freeradius-users@lists.freeradius.org Subject: Re: Load Balancing EAP with freeradius... On 03/23/2011 08:56 PM, Robert Roll wrote:
I'd like to try load balancing EAP/PEAP/MSCHAPV2 using freeradius. I looked at the proxy.conf and it seems that there are two options, because you have to insure the same end client talks to the same radius server. There seems to be client-balance that uses IP source addresses and
We use client-port-balance. IIRC this is the recommended method for UK eduroam sites.
there is Load-Balance-Key something like
update control { Load-Balance-Key := "%{NAS-IP-Address} %{NAS-Port} %{User-Name} %{Calling-Station-ID}" }
Huh. Neat. I hadn't seen that.
Currently, we have a Radiator server that uses client mac-addresses for this purpose. If I do want to use the Load-Balance-Key, I'm honestly not sure where to put the update of the Load-Balance-Key.. Does it go in the proxy.conf ?
That's an unlang statement, so it goes in a radius virtual server. Since you want to use it for proxying you will have to do it in the "authorize" section (or maybe pre-proxy) e.g. /etc/raddb/sites-enabled/default: authorize { update control { Load-Balance-Key = "%{Calling-Station-Id}" } } - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html