Security

Reply
Super Contributor I
Posts: 294
Registered: ‎02-07-2013

Which network interface do CoA requests come out of

Hi,

 

I've got a cluster of CPPM servers, I'm using both network interfaces so I've got a management lan and a data lan. An F5 load balances client requests across the data lan interfaces of each of our secondary  servers.

I've a question about how a CoA request gets out of the cluster. If I'm logged onto the master publisher and I send a CoA request to terminate a session, what clustered box does it come out of? Do CoA requests all come out of the master publisher? Does it come out of the cluster member that  serviced the  initial auth request?

 

Other reason for asking is on our comware switches you have to define the ip/key associated with the box sending the CoA and thats either going to be the master or all members of the cluster.

 

Rgds

Alex

 

Guru Elite
Posts: 8,465
Registered: ‎09-08-2010

Re: Which network interface do CoA requests come out of

It should be sourced from the server that handled the authentication request.

You should add all of your servers for dynamic authorization.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor I
Posts: 294
Registered: ‎02-07-2013

Re: Which network interface do CoA requests come out of

and if your servers have 2 network interfaces, a managment one and a data one that all the auths come in via?

 

Which interface do the CoA requests come out of?

A

MVP
Posts: 4,272
Registered: ‎07-20-2011

Re: Which network interface do CoA requests come out of

The Data Port
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
Showing results for 
Search instead for 
Did you mean: