We use FreeRadius and we manually load balance. We try to keep things simple with good naming schemes since, at this point, we have 7 Aruba M3 production controllers with 4 backups supporting over 3000 APs. We have 8 RADIUS server groups (4 physically different RADIUS servers with 2 instances of FreeRadius running on each of them). What we decided to do was run each main controller to have a different primary RADIUS server. We use EAP-TTLS(PAP) - it's single threaded to a backend Kerberos system, so we needed the extra servers to handle the load (we were peaking over 17K clients on the system at a time this past spring, and who knows what fall will bring). It was easier for us to do this manually - one less thing to worry about failing and we run reports from our RADIUS servers to make sure we are ok. We were also running scripts on our controllers to make sure we didn't get server timeouts as well. Hope this helps - good luck!
Colleen Szymanik University of Pennsylvania From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Hulko Sent: Tuesday, May 15, 2012 2:06 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Radius Load-balancing and Aruba We are attempting to create a load-balance farm of Radius servers for our 802.1x authentication. The foundation is: Citrix Netscalars 9000s Aruba M3 controllers Radiator radius server (currently 3) on a Windows platform. We have been unable to successfully get authentication to work. We are getting Aruba involved, but they do not seem to have an answer yet. Any comments/suggestions if you are already doing this or have alternatives would be greatly appreciated. Thanks [cid:image001.gif@01CD3341.6C9C5D10] Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111 x81390 e-mail: mihu...@uwo.ca<mailto:mihu...@uwo.ca> <mailto:mihu...@uwo.ca> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
<<inline: image001.gif>>
