Cisco Cisco IOS Software Release 12.2(27)SBC

Page de 38
RADIUS Server Load Balancing
  How to Configure RADIUS Server Load Balancing
4
Cisco IOS Security Configuration Guide
When using the RADIUS automated tester, verify that the test packets being sent by the network access 
server (NAS) to the AAA servers are being responded to. If the servers are not configured correctly, the 
packets may be dropped and the server erroneously marked dead.
Caution
It is recommended that a test user, one that is not defined on the RADIUS server, be used for RADIUS 
server automated testing to protect against security issues that may arise if the test user is not correctly 
configured.
Note
If you want to check load balancing transactions at a specific point in time, you can use the 
test aaa group command.
How to Configure RADIUS Server Load Balancing
This section contains the following procedures that allow you to configure load balancing:
Enabling Load Balancing for Named RADIUS Server Group
Use the following task to enable RADIUS server load balancing for a named server group.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
radius-server host {hostname ip-address} [test username user-name] [auth-port port-number
[ignore-auth-port] [acct-port port-number] [ignore-acct-port] [idle-time seconds]
4.
aaa group server radius group-name
5.
load-balance method least-outstanding [batch-size number] [ignore-preferred-server
DETAILED STEPS
Command or Action
Purpose
Step 1
enable
Example:
Router> enable
Enables privileged EXEC mode. 
Enter your password if prompted.
Step 2
configure
 terminal
Example:
Router# configure terminal
Enters global configuration mode.