Hi Yu:
We went with option 2, setting up multiple server groups, aaa profiles, and
virtual-ap profiles.
As Tim says in that post, it's a pain to setup, but it works.
But in the end, you get some load balancing with failover capability to the
other server(s).

Good luck!
Tony


-----Original Message-----
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:[email protected]] On Behalf Of Wang, Yu
Sent: Tuesday, September 02, 2014 4:35 PM
To: [email protected]
Subject: Re: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

Tony,

Thanks for the information. Which option did you go with, 1) or 2)? We are
running 6.3.1.9. I'll check with our wireless team on the 6.4 code.

Yu Wang
____________________________
Network Architect
Information Technology Services
The Florida State University
850-645-6810
[email protected]


-----Original Message-----
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:[email protected]] On Behalf Of Tony Kord
Sent: Tuesday, September 02, 2014 4:23 PM
To: [email protected]
Subject: Re: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

Hi Yu:

>> Since there is no load balancing on aruba controllers (I was told 
>> it's
coming this fall), all controllers send auth requests to one radius server. 

With the current Aruba OS, there is a way to send the requests from each
controller to a different radius server.
See this post:
http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Load-Balanci
ng-across-Clearpass-Servers/m-p/193277/highlight/true#M14350

I've implemented this, and it works great.

Tony Kord
Elms College
Chicopee, MA

**********
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to