Maybe you should use mysql clustering instead?

Thanks for the tip. Unfortunately, mysql isn't a supported database at my company. Do you know if it's possible using FR configuration as opposed to DB clustering?

Thank you so much for your time Alan.

Configure both modules:

Yup - I did that..

And then list them both in the "instantiate" section

Yup - I eventually did that too.. My concern is that if I list 2 sql instances and both have readclients=yes and either one is down, then FR won't start. I read another thread about this and it didn't seem like there was a way around this currently. I would be willing to create an enhancement if you think it's a reasonable thing to do and if you would entertain the possibility of accepting the patch. If so, and you'd like to provide some guidance on how you'd like to see it implemented, let me know. Or, I can propose something and ask for your feedback if you'd prefer.

Then in the virtual server for the dynamic client, list them in a redundant section:

Ugh - I had redundant in the instantiate. One more thing.. I'm having trouble getting redundancy to work in the dynamic client virtual server: authorize { redundant sqlha { sqlaugs sqlroch } if ("%{sqlha: SELECT nasname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}") { update control { FreeRADIUS-Client-IP-Address = "%{Packet-Src-IP-Address}" FreeRADIUS-Client-Shortname = "%{sqlha: SELECT shortname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" FreeRADIUS-Client-Secret = "%{sqlha: SELECT secret FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" FreeRADIUS-Client-NAS-Type = "%{sqlha: SELECT type FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}" } } } Note: query lines are split above for readability - they are not split in the config. I've tried sqlha as a prefix, as shown above, which I now know is wrong because it has no xlate capability (if I'm reading the code correctly). I also tried sqlroch and sqlaugs as a prefix. If I use a prefix of a database that is down, then it never tries the 2nd choice for the assignment stmts (it does try the 2nd choice for the if stmt). If I use the prefix of a database that is up, it works fine for assignment and if stmts. I attached the debug output for all 3 tests. For all 3 tests, sqlroch was up and sqlaugs was down. Am I doing something wrong or is this a bug? I thought about using an else block that uses the other sql module as a prefix; but, if that's needed, then what is the purpose of redundant? Thanks again for your help.

Hi, We're having a bit of a problem with FreeRADIUS not always including VLAN information in access-accept packets; I've not been able as yet to establish what the cause is so I thought I'd throw it out to the list if there's something others have come across. Needless to say our testing through the summer had not highlighted this issue, but now we have 3000 students trying to connect it's become apparent. A bit of info, we're seeing this issue in both FR 2.1.1 and 2.1.7, and our NASes are Cisco WiSM. Users' VLAN info is stored in the SQL usergroup table. I have an sql.athorize statement in the Post-Auth section of both the default (outer), and inner-tunnel conf files. Initially I thought it was only clients with an anonymised outer identity that were having this issue, which seemed plausible as the sql.athourize in default would see the outer and fail to find it in sql (though wouldn't explain why it works sometimes); but it appears not to just these users, as we're now seeing users who are not using anon outers having the same issue. Another thought was that fast-reauth could be the issue, in that somehow a fast-reauth request was not doing a Post-Auth sql.authorize and therefore not sending back the VLAN info? I fully expect it's a config issue, but any insight would be gratefully received. Currently I do not have CCKM enabled on the controllers, but for some time I have been considering enabling this to take some load off RADIUS, and also wondered if it would help this current problem. Is there anything to be wary of with CCKM? Many thanks, Jezz Palmer.