information on configuring the RADIUS NAS request timeout and max number of retries,
see Working with WLANs and WLAN Groups. For 3rd party APs, you must ensure that
the configured Response Window on the controller is higher than the RADIUS NAS
request timeout multiplied by the RADIUS value. The maximum number of retries is
configured at 3rd party controller/ AP.
• Rate Limiting: This is set at the controller, and the controller drops the Radius Request
messages when the configured rate limit has been reached. Configure the following options.
• Maximum Outstanding Requests (MOR): Set the maximum number of outstanding
requests (RADIUS messages for which the controller is awaiting a reply) per server. Type
0 to disable it, or set a value between 10 and 4096.
For example, if the AAA server is configured to only handle 100 Authentication Requests
at any time, then MOR can be set to 100 under the controller's Authentication Services
page. When the MOR limit is reached for any AAA server, the controller raises event 1302,
Rate limit for TOR surpassed.
• Threshold (% of MOR): Set a percentage value of the MOR at which the controller will
generate an event. For example, if the MOR is set to 1000 and the threshold is set to 50%,
the controller will generate an event when the number of outstanding requests reaches
500. This value notifies the user about the increasing load on a AAA server by raising an
event.
For example, if the MOR is set to 100 and the Threshold is set to 80%, when the number
of outstanding requests sent to the AAA server are 80, event 1300, Rate Limit Threshold
Surpassed is raised. The controller continues to proxy the AAA server until it reaches 100.
• Sanity Timer: Set a timer (in seconds) that will be started whenever a condition that
generates an event is reached. This helps prevent excessive events for conditions that
fluctuate frequently, and especially useful in avoiding false alarms for flickering peak traffic.
Since Rate Limiting is enforced uniquely for each server, administrators must consider the
load capacity from both Authentication and Accounting services together for a AAA server
when the same AAA server is used for both Authentication and Accounting Services
• User Traffic Profile Mapping
Follow these steps to configure the user traffic profile:
• Type a Group Attribute Value.
• Select a User Role from the drop-down list.
• Click Add.
The mapped user profile is listed.
Testing the AAA Server Configuration
The test AAA server holds the information of authentication or accounting server, including the
server IP, service port, shared secret and other settings of the current user.
If the requested service is successful, the API will display the information.
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
156
Configuring Services and Profiles
Configuring Authentication Services
To Next Page
Loading...
