Radius Accounting Authentication Redundancy: Difference between revisions
Nicole Tan (talk | contribs) (Fixed link) |
(Updated links to versions) |
||
| Line 31: | Line 31: | ||
== Configuration == | == Configuration == | ||
*[[Web_Portal_Tutorial_Guide_v2.7#RADIUS_Authorization_and_Authentication|Web Portal v2.7: RADIUS Authorization and Authentication]] | *[[Toolpack:Call_Routes_Settings_E#tab=RADIUS_Authorization_and_Authentication|Web Portal v3.2: RADIUS Authorization and Authentication configuration]] | ||
*[[Toolpack:Tsbc_Call_Routes_Settings_3.1#tab=RADIUS_Authorization_and_Authentication|Web Portal v3.1: RADIUS Authorization and Authentication configuration]] | |||
*[[Toolpack:Tsbc_Call_Routes_Settings_3.0#RADIUS_Authorization_and_Authentication|Web Portal v3.0: RADIUS Authorization and Authentication configuration]] | |||
<div class="mw-collapsible mw-collapsed" data-collapsetext="other versions" data-expandtext="Click here for other versions" style="width: 400px;"> | |||
*[[Toolpack:Call_Routes_Settings_C#RADIUS_Authorization_and_Authentication|Web Portal v2.10: RADIUS Authorization and Authentication configuration]] | |||
*[[Toolpack:Call_Routes_Settings_B#RADIUS_Authorization_and_Authentication|Web Portal v2.9: RADIUS Authorization and Authentication configuration]] | |||
*[[Toolpack:Call_Routes_Settings_A#RADIUS_Authorization_and_Authentication|Web Portal v2.8: RADIUS Authorization and Authentication configuration]] | |||
*[[Web_Portal_Tutorial_Guide_v2.7#RADIUS_Authorization_and_Authentication|Web Portal v2.7: RADIUS Authorization and Authentication configuration]] | |||
</div> | |||
Latest revision as of 10:07, 12 July 2022
With version 2.7, Toolpack fully supports redundancy on Radius authentication and accounting. Short for AUTH/ACCT in the below description.
Multiple Radius Servers
Toolpack Radius AUTH/ACCT can be provisioned with several Radius servers (not only two). Each Radius client processing AUTH and ACCT are flexibly configurable by:
- Use polling (Status-Server)
- Requests timeout and number of retries
Current(Primary) Radius AUTH/ACCT server selection
- If polling is enabled, the selected "Current" server will be the first that responds to the polling requests.
All other servers in the list will be flagged as "online" or "offline" depending whether it responses to the polling.
- If polling is disabled, the server is selected in a round robin order, the first being tested successfully is the "Current".
All other servers in the list will be flagged as "online" or "offline" depending whether it responses to requests within the timeout and retries.
Radius AUTH/ACCT switch-over
Let's take this scenario to explain the Radius AUTH/ACCT switchover feature:
- We have servers A and B, both 'online', and server A is 'Current'.
- Request W is sent to server A.
- Request X，R,Z are in the queue sent to server A.
- Server A doesn't respond to Request W. In consequence, server A is qualified as 'offline' and server B is elected as 'Current'.
- Request W is then sent to server B.
- All new requests M,Y,Q will be sent to server B.
- The Request X which is in queue to A, will be sent to A. If A is still qualified as 'offline'. It will be then sent to B.
- If server A is back qualified as "online". It will process the request X.
- The requests R,Z in queue will be processed same as X.