We run RADIATOR and just had to add additional servers to handle the load.
-Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Craig Simons <craigsim...@sfu.ca<mailto:craigsim...@sfu.ca>> Reply-To: Craig Simons <craigsim...@sfu.ca<mailto:craigsim...@sfu.ca>> Date: Wednesday, September 5, 2012 11:45 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: Re: [WIRELESS-LAN] FreeRADIUS performance question Using HiPath/Radiator Radius. Today is the first real day of classes though, so I would expect things to go higher. 34 ns-ryu.its.sfu.ca 34 ns-ryu.its.sfu.ca 35 ns-ryu.its.sfu.ca 36 ns-ryu.its.sfu.ca 40 ns-ryu.its.sfu.ca 41 ns-ryu.its.sfu.ca 42 ns-ryu.its.sfu.ca 45 ns-ryu.its.sfu.ca 47 ns-ryu.its.sfu.ca 50 ns-ryu.its.sfu.ca Regards, Craig SFU SIMON FRASER UNIVERSITY Network Services Craig Simons Network and Systems Administrator Phone: 778-782-8036 Cell: 604-649-7977 Email: craigsim...@sfu.ca<mailto:craigsim...@sfu.ca> Twitter: simonscraig<http://www.twitter.com/simonscraig> ________________________________ From: "Danny Eaton" <dannyea...@rice.edu<mailto:dannyea...@rice.edu>> To: WIRELESS-LAN@listserv.educause.edu<mailto:WIRELESS-LAN@listserv.educause.edu> Sent: Wednesday, 5 September, 2012 09:09:47 Subject: Re: [WIRELESS-LAN] FreeRADIUS performance question Here at Rice -bash-3.00$ cat today | tr -s " " | cut -d " " -f 4 | uniq -c | sort -n | tail -10 65 net3 68 net3 72 net3 74 net3 74 net3 76 net3 76 net3 78 net3 82 net3 107 net3 -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Rodkey Sent: Wednesday, September 05, 2012 10:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] FreeRADIUS performance question 16 19:11:44 18 04:36:17 18 04:43:12 18 05:45:12 18 06:26:13 18 07:22:07 18 08:18:46 20 01:58:49 20 03:28:29 23 03:46:02 On 9/5/12, Walter Reynolds <wa...@umich.edu<mailto:wa...@umich.edu>> wrote: > Ok, we all have different usage patters and number of users. So can > we do a quick check of what sort of authentications our servers are > doing per second. Yes this does not filter out failures and logs > and..... But at least it is an idea of how we stand to compared to others. > > cat radius.log-[DATE] | tr -s " " | cut -d " " -f 4 | uniq -c | sort > -n | tail -10 > > > I did this for yesterday (first day of classes) and got the following. > > 61 13:03:03 > 62 13:01:03 > 62 13:05:03 > 62 14:50:11 > 64 11:29:29 > 64 12:50:13 > 65 12:47:03 > 65 12:50:08 > 65 15:59:33 > 68 13:02:58 > > > Wondering what others get. Thanks. > > > ------------------------ > Walter Reynolds > Principal Systems Security Development Engineer Information and > Technology Services University of Michigan > (734) 615-9438 > > > On Wed, Aug 22, 2012 at 7:31 PM, Gogan, James P > <go...@email.unc.edu<mailto:go...@email.unc.edu>> > wrote: > >> A question for folks with relatively large 802.1x (greater than >> 15,000 unique clients) wi-fi deployment (EAP-TTLS) with a FreeRADIUS >> infrastructure using Kerberos as the backend authentication ...**** >> >> ** ** >> >> - how many FreeRADIUS servers do you deploy?, and**** >> >> - have you changed any of the default eap.con/radius.conf performance >> parameters/values?**** >> >> ** ** >> >> The good news is that we've started the year with a lot more folks >> finally using the 802.1x network than the last academic year.**** >> >> The bad news is that we're getting long delays in >> connecting/authenticating -- not just a wireless issue as we're also >> getting lots of "RADIUS server FAILED" traps from our VPN >> concentrators throughout the day since the semester started (using >> the same RADIUS servers as the 1x wireless deployment)**** >> >> ** ** >> >> We've also been seeing in the last three days HUGE numbers of:**** >> >> Aug 22 19:25:00 calvin radiusd[21691]: Discarding duplicate request >> from client Wireless8021XResNET port 32769 - ID: 76 due to unfinished >> request >> 253745**** >> >> Aug 22 19:25:00 calvin radiusd[21691]: Discarding duplicate request >> from client Wireless8021XResNET port 32769 - ID: 140 due to >> unfinished request >> 253705**** >> >> Aug 22 19:25:00 calvin radiusd[21691]: Discarding duplicate request >> from client Wireless8021XResNET port 32769 - ID: 85 due to unfinished >> request >> 253758**** >> >> and **** >> >> Aug 19 03:30:14 calvin radiusd[3507]: Login incorrect: [anonymous] >> (from client Wireless8021XResNET port 29 cli 68-a8-6d-ae-fc-5d)**** >> >> Aug 19 03:31:15 calvin radiusd[3507]: Login incorrect: [anonymous] >> (from client Wireless8021XResNET port 29 cli 28-6a-ba-6a-9d-6e)**** >> >> Aug 19 03:31:35 calvin radiusd[3507]: Login incorrect: [anonymous] >> (from client Wireless8021XResNET port 29 cli c8-bc-c8-2e-52-13)**** >> >> Aug 19 03:32:13 calvin radiusd[3507]: Login incorrect: [anonymous] >> (from client Wireless8021XResNET port 29 cli 10-40-f3-29-60-2c)**** >> >> ** ** >> >> which, from what we can discern from the wonderful world of google, >> may be related to a "slow database", although our Kerberos folks >> don't see any issues on their end.**** >> >> ** ** >> >> Any thoughts? Responses to the two questions above would be >> appreciated . thanks!!**** >> >> ** ** >> >> -- Jim Gogan / Univ of North Carolina at Chapel Hill**** >> >> ** ** >> ********** Participation and subscription information for this >> EDUCAUSE Constituent Group discussion list can be found at >> http://www.educause.edu/groups/. >> >> > > ********** > Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. !DSPAM:911,50477469265761397411370! ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
