Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

RADIUS load-balancing between the Publisher and Subscriber in Clearpass

This thread has been viewed 5 times

  • 1.  RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    Posted Jul 25, 2014 04:26 PM

    Hello - 

     

    Is there a way to do load-balancing for RADIUS requests between the Publisher and Subscriber in ClearPass? To accomplish this would a VIP need to be created?

     

    thank you!



  • 2.  RE: RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    EMPLOYEE
    Posted Jul 25, 2014 04:29 PM
    The VIP is only for failover. You will need a load balancer or in Aruba Wireless you can use the load balancing if you are running a early release version.


  • 3.  RE: RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    EMPLOYEE
    Posted Jul 25, 2014 04:30 PM
    Three options:

    1) hardware load balancer

    2) Create two server groups. One with server A in slot 1, B in slot 2. Then the other, flip it. You can then flip between these server groups in your different AP groups. If you have multiple controllers, you could also just point one controller at A with B as a backup and flip it for the other controller.

    3) starting in AOS 6.4, there is a RADIUS load balancing option in the server group settings.


  • 4.  RE: RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    Posted Jul 25, 2014 04:32 PM

    Thanks much!



  • 5.  RE: RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    Posted Jul 25, 2014 04:31 PM
    VIPs are usually used for redundancy, not load balancing. You can, however, load balance a couple ways. First, you can put a load balancer between the network devices and the RADIUS server and have the load balancer split the load. Second, you can point 1/2 your devices to the publisher as primary and 1/2 to the subscriber, then point the secondary RADIUS configuration to the other.

    Make sense?


  • 6.  RE: RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    Posted Jul 25, 2014 04:33 PM

    Yes it does! Wow, great response time to my question! Thanks all!



  • 7.  RE: RADIUS load-balancing between the Publisher and Subscriber in Clearpass

    EMPLOYEE
    Posted Jul 25, 2014 04:35 PM
    Airheads NASCAR!