Inline responses for clarity. > In regard to gnu-RADIUS, I wonder whether you can comment on > > 1. It's performance on load balancing and authentication response time > (heard some horrible stories about it).
You can setup multiple radius boxes to query the same SQL server, or send accounting information to different SQL servers to balance the load. Since I haven't had any load issues with it yet, I'm afraid there's not much to tell you. I have worked for an ISP before that scaled RADIATOR up to over 250,000 customers in a plaintext password file. (not fun to maintain) ...but I wouldn't reccomend going that route. There are many places to load balance though starting with not pointing all the radius clients to the same radius server, or setting up multiple DB servers for the different radius servers. > 2. What client appliances (to talk to the RADIUS) available and for what > platform? And cost if possible? >From gnu-radius main page (http://www.gnu.org/software/radius/): * Radius is compatible with any existing terminal server. It can even * communicate with terminal servers that have some deviations from the * RADIUS protocol. The built-in extension language allows the * administrator to write his own rules for ad hoc parsing and * restructuring of the packets coming from terminal servers. I've never pointed a wireless AP to a radius server before. Wouldn't know what the request looks like or if it deviates from standard radius protocol. > 3. As a follow up question of (2) for the audience of this wireless > community, what client appliances (to talk to the RADIUS) that are > available for APs that do not come with RADIUS authentication feature? I'm not sure I completely understand what you are asking here. What wireless AP hardware is out there that doesn't support RADIUS authentication? I think you'll have to do the footwork on that one with each available hardware vendor. My guess is there are more that don't support radauth than those that do. Gerald -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
