That is my first thought also. I might put two smaller boxes out on select controllers and do selective port mirroring from the actual controller to reduce the flood of traffic. More thinking and planning needed.
-- Charles Rumford Network Engineer/Senior Wireless Engineer ISC Network Operations University of Pennsylvania OpenPGP Key ID: 0xF3D8215A (p) 215-746-2808<tel:215-746-2808> Sent from my phone On Oct 15, 2015, at 17:29, Jeremy Gibbs <[email protected]<mailto:[email protected]>> wrote: Hmm, I am interested to hear how you might accomplish that. My first instinct is to port mirror the controller to a large enough box to handle the traffic and have a filter looking for port 1645/1812 (whatever your RADIUS AUTH port is) so you only capture that traffic (I would use tcpdump). Then you might be able to do some stats on it if you capture for an hour or so. -- Jeremy L. Gibbs Sr. Network Engineer Utica College IITS T: (315) 223-2383 F: (315) 792-3814 E: [email protected]<mailto:[email protected]> http://www.utica.edu On Thu, Oct 15, 2015 at 5:13 PM, Charles Rumford <[email protected]<mailto:[email protected]>> wrote: We are using FreeRADIUS, but I want to measure independent of the RADIUS server. -- Charles Rumford Network Engineer/Senior Wireless Engineer ISC Network Operations University of Pennsylvania OpenPGP Key ID: 0xF3D8215A (p) 215-746-2808<tel:215-746-2808> Sent from my phone On Oct 15, 2015, at 17:12, Jeremy Gibbs <[email protected]<mailto:[email protected]>> wrote: What are you using for a RADIUS server? -- Jeremy L. Gibbs Sr. Network Engineer Utica College IITS T: (315) 223-2383<tel:%28315%29%20223-2383> F: (315) 792-3814<tel:%28315%29%20792-3814> E: [email protected]<mailto:[email protected]> http://www.utica.edu On Thu, Oct 15, 2015 at 5:08 PM, Charles Rumford <[email protected]<mailto:[email protected]>> wrote: I’m currently embarking on a project to determine the number of RADIUS auths per minute each one of my controllers is generating to plan for the capacity I need for my RADIUS servers. I was curious if anyone has embarked on a similar journey and tried to measure auth rates coming from their controllers? I have a couple of ideas that I’m up for sharing, but I wanted to see if anyone else has done this. Thanks! ---- Charles Rumford Network Engineer/Senior Wireless Engineer ISC Network Operations University of Pennsylvania OpenPGP Key ID: 0xF3D8215A (p) 215-746-2808<tel:215-746-2808> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
