FreeRADIUS High Availability with AD Integration
Hello guys, Sorry if this is a question that was already answered on this list. I've looked over the web and the only documentation that I found was about FreeRADIUS with MySQL HA, which I'm not interested. I've a single FreeRADIUS 3 server integrated in a AD domain to provide 802.1x authentication over the air and in the Ethernet cable. It's working perfectly, but I would like to implement an High Availability feature. The question is how to do this? Just install another FreeRADIUS server independently and everything would be fine? Since the supplicants can use two distinct RADIUS servers. Thanks in advance,
Hi,
I've a single FreeRADIUS 3 server integrated in a AD domain to provide 802.1x authentication over the air and in the Ethernet cable. It's working perfectly, but I would like to implement an High Availability feature.
okay.... you can either have multiple ntlm_auth's defined in multiple mschap modules and do the same way as mysql HA - with failover/error redundancy....or
The question is how to do this? Just install another FreeRADIUS server independently and everything would be fine?
...use multiple RADIUS servers that are bound into the AD yes.
Since the supplicants can use two distinct RADIUS servers.
no. the NAS ca use multiple RADIUS servers - the supplicant in the OS hasnt a clue about anything. and whilst you can use different RADIUS certs, dont. just use the same cert, signed by the same CA. alan
Thank you Alan. Considerations on the rest of the message:
On Mar 30, 2015, at 6:00 PM, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
I've a single FreeRADIUS 3 server integrated in a AD domain to provide 802.1x authentication over the air and in the Ethernet cable. It's working perfectly, but I would like to implement an High Availability feature.
okay.... you can either have multiple ntlm_auth's defined in multiple mschap modules and do the same way as mysql HA - with failover/error redundancy....or
The question is how to do this? Just install another FreeRADIUS server independently and everything would be fine?
...use multiple RADIUS servers that are bound into the AD yes.
I will do this way. Two distinct FreeRADIUS Servers.
Since the supplicants can use two distinct RADIUS servers.
no. the NAS ca use multiple RADIUS servers - the supplicant in the OS hasnt a clue about anything. and whilst you can use different RADIUS certs, dont. just use the same cert, signed by the same CA.
Sorry, I was referring to the NAS. I will use the Wildcard cert that we have from GlobalSign.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Vinícius Ferrão