Cisco Cisco IOS Software Release 12.2(27)SBC
RADIUS Server Load Balancing
How to Configure RADIUS Server Load Balancing
5
Cisco IOS Security Configuration Guide
Enabling Load Balancing for Global RADIUS Server Group
Use the following task to enable RADIUS server load balancing for the global RADIUS server group.
This is the group referred to as “radius” in the AAA method lists.
This is the group referred to as “radius” in the AAA method lists.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
radius-server host {hostname | ip-address} [test username user-name] [auth-port port-number]
[ignore-auth-port] [acct-port port-number] [ignore-acct-port] [idle-time seconds]
[ignore-auth-port] [acct-port port-number] [ignore-acct-port] [idle-time seconds]
4.
radius-server load-balance method least-outstanding [batch-size number]
[ignore-preferred-server]
[ignore-preferred-server]
Step 3
radius-server host
{hostname | ip-address}
[test username user-name] [auth-port
port-number] [ignore-auth-port] [acct-port
port-number] [ignore-acct-port] [idle-time
seconds]
Example:
Router(config)# radius-server host 192.0.2.1
test username test1 idle-time 1
Enables RADIUS automated testing.
•
The test username keyword must be used to enable
RADIUS automated testing, followed by the value for
the user-name argument.
RADIUS automated testing, followed by the value for
the user-name argument.
•
By default, auth-port is tested using port 1645.
•
Use ignore-auth-port to turn off testing of the
authentication port.
authentication port.
•
By default, acct-port is tested using port 1645.
•
Use ignore-acct-port to turn off testing of the
accounting port.
accounting port.
•
By default, the idle-time is 3600 seconds. The range is
1 – 35791.
1 – 35791.
Step 4
aaa group server radius
group-name
Example:
Router(config)# aaa group server radius rad-sg
Enters server group configuration mode.
Step 5
load-balance method least-outstanding
[batch-size number] [ignore-preferred-server]
Example:
Router(config-sg)# load-balance method
least-outstanding batch-size 30
Enables least-outstanding load balancing for a server group.
•
By default, the batch-size is set to 25. A range of 1 –
2147483647 may be used.
2147483647 may be used.
•
By default, the preferred server is enabled.
•
If you want to disable the preferred-server setting, use
the keyword ignore-preferred-server.
the keyword ignore-preferred-server.
Command or Action
Purpose