Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) radius & backup radius
> > Troy Wollenslegel writes:
> > > settings. Is there any way to easily tell the ascend to look back at the
> > > 1st radius server instead of the 2nd?
> > Sure. On the second box, kill radius for a minute. ;-)
> Just remove the secondary by changing it on the Max to 0.0.0.0 and save.
> The Max will immediately switch to the primary. Then enter the secondary's
> IP address again and save.
Hey Ascend dudes, Doesn't the constant discussion of the behavior
of the change between radius servers indicate that there might be
an opportunity to improve the product?
I you are looking for ideas, how about adding a metric on the server
so that if they are all equal, it will follow the current behavior,
but if they are different, it will keep checking to see if the
primary server is alive again.
Here is how I would see the menu look:
90-B00 Mod Config
Auth...
>Auth=RADIUS
Auth Host #1=10.1.1.1
Auth Port=1645
Auth Src Port=0
Auth Timeout=60
Auth Key=*SECURE*
Auth Metric=10
Auth Host #2=10.1.2.1
Auth Port=1645
Auth Src Port=0
Auth Timeout=60
Auth Key=*SECURE*
Auth Metric=20
Auth Host #3=10.1.3.1
Auth Port=1645
Auth Src Port=0
Auth Timeout=60
Auth Key=*SECURE*
Auth Metric=20
Which means, always use 10.1.1.1 if it is up, otherwise switch to
10.1.2.1 or 10.1.3.1 at your leasure. Notice the ability to
specify the src and dst ports for each server, which would be nice
but not essential for our use.
This should not be too much trouble, should it?
--
Mickey
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
Follow-Ups: