Security

Hi,

 

I'm a long time listener, but first time caller.

 

Many wireless products list RADIUS servers in a primary/back-up arrangement where the primary is used whenever available, and the back-up is only used when the primary is unavailable.  Aruba uses server groups, with no explicit primary/back-up relationship.  That said, it appears that the controllers use the first server in the list and only moves down the list if the ones above it are unavailable - an implied primary/back-up arrangement..

 

Is there any way to get the controllers to spread auth around the server group instead of sending everything to the first server in the list?

 

Thanks,

 

Chuck Enfield

Manager, Wireless Systems & Engineering

Penn State

Load balancing AAA servers is on the roadmap. I can't say exactly when it will show up, but it is something they are going to do. You're local SE can probably give you more details.

---

@olino wrote:
Load balancing AAA servers is on the roadmap. I can't say exactly when it will show up, but it is something they are going to do. You're local SE can probably give you more details.

---

is this the virtual IP that got added in 6.3 or is there more to expect?

You can always use a loadbalancer

What RADIUS server are you using?   You could consider setting up a RADIUS Proxy and distributes authentications to other servers.     In your server group, you could define the Proxy as #1 and your physical servers as #2 and #3 in the event the Proxy is down.

 

I've set this up using NPS in the past.

Thanks.  We're familiar with things we can do to the server infrastructure.  I was hoping there was a quick change we could make on the controllers to mitigate a problem we're having until the servers can be properly dealt with.

 

Chuck

Probably the best thing you can do is create 2 server-groups (containing the same servers in inverse order)  and apply those 2 server-groups to different ap-groups.

This offcourse is far from perfect but you should be able to divide the load alot better.

ArubaOS 6.4 has server load balancing.  http://www.arubanetworks.com/techdocs/ArubaOS_64_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/AAA_Servers/Load_Balancing.htm