We use FreeRadius 2.1.x servers running on pair HP DL360-G7s with Linux. We have around 8k simultaneous users online at any one time. Authentication type is 802.1x MS-CHAPv2/PEAP which is proxied though the FreeRadius servers to a cluster of MS AD servers, where our single-sign-on system terminates. We also terminate our captive portal and various other radius enabled devices to these same servers.
Appreciations: It just works. Pretty simple setup, we try to keep as much of the configs as stock as possible. The huntgroups feature is good for grouping different devices together, we then apply special rules to these certain devices. The flexibility to rewrite usernames has helped out greatly during some of legacy migrations. Centralized logging via syslog. Issues: (I don't consider this a problem, but you should be aware of it). Our system is all console based. There is no GUI. Log file analysis requires a bit of shell experience with cat, grep, awk, etc.. Personally I like this better, but YMMV. On Tue, Nov 1, 2011 at 1:25 PM, Lee H Badman <[email protected]> wrote: > We’re feeling some frustration with our current RADIUS solution (ACS 5, > virtual appliances) that are frequently attributed to the size of our client > base. (At the same time, the logging and reporting on ACS is among the best > I’ve ever seen.) > > > > For those of you with large (10,000 + users) RADIUS deployments, what > servers are you using and what are your points of pain and/or appreciation? > > > > We currently only use the servers in question for wireless client support, > doing MS-CHAPv2/PEAP. > > > > > > Regards- > > > > Lee Badman > > > > > > Lee H. Badman > > Wireless/Network Engineer > > Information Technology and Services > > Adjunct Instructor, iSchool > > Syracuse University > > 315 443-3003 > > > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. -- Jason E. Murray [email protected] http://www.zweck.net/ . ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
