Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-11 Thread Arran Cudbard-Bell
> On 10 Mar 2016, at 22:36, Curtis K. Larsen wrote: > > About a year and a half ago I did pretty exhaustive testing of RADIUS load > with the Spirent > traffic generator and with the assistance of PacketFence developers. > (PacketFence is also based > on

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-10 Thread Curtis K. Larsen
About a year and a half ago I did pretty exhaustive testing of RADIUS load with the Spirent traffic generator and with the assistance of PacketFence developers. (PacketFence is also based on FreeRADIUS). They suggested we tweak the MaxConcurrentAPI setting on our test AD server. So we did,

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-10 Thread Jake Snyder
If AD is not keeping up with the NTLM requests, giving the DCs more NTLM worker threads can help it keep up with higher loads. Working with TAC we found specifically in the ACS logs that it was waiting for Windows to respond. As far as number of devices, they weren't showing increases over

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-10 Thread Matthew Newton
Hi, On Thu, Mar 10, 2016 at 10:54:59AM -0800, Jake Snyder wrote: > That's for the great info on FreeRadius. I don't think this is > the case in what I'm seeing that, which is specifically that > Windows AD is not keeping up with NTLM. OK, that's interesting. I think the issue that others have

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-10 Thread Kitri Waterman
This exact discussion came up in a ClearPass in-depth class yesterday at Atmosphere/Airheads since ClearPass (based on FreeRadius) only has so many worker threads. Anything over a 2 sec delay between ClearPass and AD was...not ideal. The class was "Adapting to Evolving User, Security and

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-10 Thread Jake Snyder
Matthew, That's for the great info on FreeRadius. I don't think this is the case in what I'm seeing that, which is specifically that Windows AD is not keeping up with NTLM. These are customers with environments that are relatively stable and have been performing well for extended periods of

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-10 Thread Matthew Newton
On Thu, Mar 10, 2016 at 09:14:02AM -0500, Earl Barfield wrote: > >Just wanted to throw this out to the educause community to see if others > >are seeing this. Although this is not ultimately a problem with Higher Ed, > >the large scale RADIUS deployments in higher ed resulting in more impact > >

Re: Recent Radius Meltdowns

2016-03-10 Thread Earl Barfield
Date:Wed, 9 Mar 2016 14:05:07 -0700 From:Jake Snyder <jsnyde...@gmail.com> Subject: Recent Radius Meltdowns Just wanted to throw this out to the educause community to see if others are seeing this. Although this is not ultimately a problem with Higher Ed, the large scale

RE: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-09 Thread Lee H Badman
University 315.443.3003 -Original Message- From: Jake Snyder [jsnyde...@gmail.com] Received: Wednesday, 09 Mar 2016, 17:35 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Subject: Re: [WIRELESS-LAN] Recent Radius Meltdowns I don't necessarily agree with the doc in all

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-09 Thread Jake Snyder
V.EDUCAUSE.EDU] > Subject: [WIRELESS-LAN] Recent Radius Meltdowns > > Just wanted to throw this out to the educause community to see if others are > seeing this. Although this is not ultimately a problem with Higher Ed, the > large scale RADIUS deployments in higher ed resulting in

RE: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-09 Thread Lee H Badman
2016, 16:05 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Subject: [WIRELESS-LAN] Recent Radius Meltdowns Just wanted to throw this out to the educause community to see if others are seeing this. Although this is not ultimately a problem with Higher Ed, the large

Re: [WIRELESS-LAN] Recent Radius Meltdowns

2016-03-09 Thread Holland, Ryan
Thanks, Jake. We are experiencing this as we speak. - Patched AD servers on 2/28/16 - Noticed one radius server reporting SAMBA/NTLM slow response times on 3/2 and 3/3 - Took that server out of service - A second radius server reporting same issue 3/8 and today, 3/9 Aruba Controllers Aruba

Recent Radius Meltdowns

2016-03-09 Thread Jake Snyder
Just wanted to throw this out to the educause community to see if others are seeing this. Although this is not ultimately a problem with Higher Ed, the large scale RADIUS deployments in higher ed resulting in more impact Several weeks ago we had a higher ed customer who's Radius environment