Re: (PM) Dial-in timeout setting? (fwd)

MegaZone (megazone@megazone.org)
Fri, 12 Feb 1999 10:30:30 -0800 (PST)

Once upon a time Adam Greene shaped the electrons to say...
>Huh! I never thought of that! It makes sense to me to have two RADIUS
>servers so that your users can still be authenticated even if the primary
>RADIUS server crashes.

That's the idea. Some sites will even split there setup - hald of their
NASen use one as a primary, the other as secondary - and the other half
reverse that. So that load is spread more evenly.

>But maybe it doesn't matter whether the primary or secondary RADIUS server
>authenticates them, as long as all the accounting records go to the same
>place so you can keep track of customer usage for billing purposes.

And the accountnig server can be completely independant for that matter.

This is one of the reasons that accounting packets are handled differently
from auth packets. The PM doesn't fall over to the secondary server as fast,
if I recall correctly it will cache up to approx. 75 acct packets, or wait
up to 10 minutes before giving up on the primary. So it tries to keep all
of your data in one place.

-MZ

-- 
-=*X GOT CLUE? ISPF II - SAN DIEGO, CA 3/6-10 <URL:http://www.ispf.com/> X*=-
<URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me..
Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/>
"A little nonsense now and then, is relished by the wisest men" 781-788-0130
<URL:http://www.megazone.org/>  <URL:http://www.gweep.net/>  Hail Discordia!
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>