www.Tutorialsforu.info

Radius Server Load balancing

                As of version 1.1.0, FreeRADIUS supports load balancing in module sections. Please read about configurable Fail-over for a more complete description of module sections.

                The short summary is that you can use a "load-balance" section in any place where a module name may be used. The semantics of the "load-balance" section are that one of the modules in the section will be chosen at random, evenly spread over the modules in the list.

Radius Configuration for Fail-over

• 1 Configurable Module Fail Over
• 2 Rewriting results for single modules
• 3 Fail-over configuration entries
• 4 More Complex Configurations
• 5 More Complex Configuration using "if" and "else"
• 6 Virtual Modules
• 7 Redundancy and Load-Balancing
  

Radius Server + MySql Integration

                FreeRADIUS Server works out of the box with a large list of SQL servers, but unfortunately there are a number of configuration guides available on the internet that are either for very old versions of FreeRADIUS Server, or are wrong, or both. This guide is an attempt to correct some of the misinformation.

Securing a RADIUS server

              For any corporate wireless infrastructure to remain secure, using 802.1X for authentication is a must - after all, it provides much more granular control of authentication credentials and can provide accounting for wireless LAN usage. Setting everything up can be a complex process fraught with choosing the right EAP type that both your clients and your RADIUS server supports in addition to putting in place the PKI infrastructure that some EAP types require. During this whole process one thing can often be overlooked - the security of the RADIUS server itself.
 

RADIUS/Diameter Protocol Interactions

This section describes some basic guidelines that servers acting as
   AAA Translation Agents may use.  A complete description of all the
   differences between RADIUS and Diameter is beyond the scope of this
   section and document.  Note that this document does not restrict
   implementations from creating additional translation methods, as long
   as the translation function doesn't violate the RADIUS or the
   Diameter protocols.