LB layer - Issue with shared secret.
Hi all, I would like to use a load balance as the first layer proxy the requests on more than one radius server. In this way, the radius packet will always be sent from the same IP address, so we would have a problem with the shared secret. Can I do that freeradius retrieves client's information via NAS-IP-Address attribute and not via Sender IP Address? I use freeradius-server-3.0.15 on RHEL 7. Best regards Andrea
On Nov 22, 2017, at 4:56 AM, Andrea Mucci <andrea.mucci@outlook.com> wrote:
I would like to use a load balance as the first layer proxy the requests on more than one radius server.
The load balancer should be aware of RADIUS. If it isn't, you have problems.
In this way, the radius packet will always be sent from the same IP address, so we would have a problem with the shared secret.
Exactly.
Can I do that freeradius retrieves client's information via NAS-IP-Address attribute and not via Sender IP Address?
No, that's not how RADIUS works. Use a RADIUS-aware load balancer, *or* use the same shared secret for all NASes. Alan DeKok.
participants (2)
-
Alan DeKok -
Andrea Mucci