Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Oct 2000 14:48:12 -0400
From:      lambert@cswnet.com
To:        freebsd-isp@FreeBSD.ORG
Subject:   Re: Radius and Accounting
Message-ID:  <200010101954.OAA67254@troi.csw.net>
In-Reply-To: <c9dvtssp8b3jqsg6u7vtrjejj2ea761oom@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>On 7 Oct 2000 15:50:14 -0400, in sentex.lists.freebsd.isp you wrote:

>>I did this yes ;-) for two POPs but we're going to have 2 more POPs and I
>>am concerned about it. At current we use PortMaster 2E (old stuff!) and
>>Radius on FreeBSD. I also use proxy radius. When you have a single radius
>>server and you've got to authenticate from more that 3 POPs, I thought
>>there would be some concern on authent traffic on the link btn the POPs.

Just as a point of reference, I have two radius servers for 14,000 dial-up
accounts.  Radiusd and named both run on the each of the two boxes. 
Monitoring the ethernet interface for these units with MRTG for about a
year has shown that the combined radius and DNS traffic seldom crosses 56K
on either box as an average for the 5 minute sample period.

Always have two radius servers.  Then you can knock one down for service
and not show and outage.

-- 
Scott Lambert
lambert@cswnet.com
Systems and Security Administrator
CSW Net, Inc.
================================================================
Written: Tuesday, October 10, 2000 - 02:48 PM




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010101954.OAA67254>