RADIUS Configuration
NAS-IP and NAS-Identifier is instance-aware. You can configure different NAS-IP and NAS-Identifier per instance-id in profile-radius configuration. Existing non-instance based NAS-IP and NAS-Identifier configuration is used as default nas-ip and default nas-id for local instance of the rack.
Example
Following are a few configuration examples.
profile radius
attribute
instance 1
nas-ip 209.165.200.225 --> Instance-1 specific NAS-IP, used for common AUTH & ACCT
nas-identifier smf1 --> Instance-1 specific NAS-Identifier, used for common AUTH & ACCT
exit
instance 2
nas-ip 209.165.200.230 --> Instance-2 specific NAS-IP, used for common AUTH & ACCT
nas-identifier smf2 --> Instance-2 specific NAS-Identifier, used for common AUTH & ACCT
exit
exit
accounting
attribute
instance 1
nas-ip 209.165.200.225 --> Instance-1 specific NAS-IP, used for common ACCT
nas-identifier smf1 --> Instance-1 specific NAS-Identifier , used for common ACCT
exit
instance 2
nas-ip 209.165.200.230 --> Instance-2 specific NAS-IP, used for common ACCT
nas-identifier smf2 --> Instance-2 specific NAS-Identifier , used for common ACCT
exit
exit
exit
server-group g1
attribute
instance 1
nas-ip 209.165.200.225 --> Instance-1 specific NAS-IP, used for server-group <g1> AUTH & ACCT
nas-identifier smf1 --> Instance-1 specific NAS-ID, used for server-group <g1> Auth &Acct
exit
instance 2
nas-ip 209.165.200.230 --> Instance-2 specific NAS-IP, used for server-group <g1> AUTH & ACCT
nas-identifier smf2 --> Instance-2 specific NAS-ID,used for server-group <g1>AUTH&ACCT
exit
exit
accounting
attribute
instance 1
nas-ip 209.165.200.225 --> Instance-1 specific NAS-IP, used for server-group <g1> ACCT
nas-identifier smf1 --> Instance-1 specific NAS-ID, used for server-group <g1> ACCT
exit
instance 2
nas-ip 209.165.200.230 --> Instance-2 specific NAS-IP, used for server-group <g1> ACCT
nas-identifier smf2 --> Instance-2 specific NAS-ID, used for server-group <g1> ACCT
exit
exit
exit
exit
exit
Since endpoint
pod
configuration is moved under specific instance, Radius Disconnect-Request VIP is also instance-aware.
instance instance-id 1
endpoint radius
replicas 1
interface coa-nas
vip-ip 209.165.202.130 vip-port 3799 --> Instance-1 specific Radius-Disconnect-Msg-VIP & PORT
exit
exit
exit
instance instance-id 2
endpoint radius
replicas 1
interface coa-nas
vip-ip 209.165.202.129 vip-port 3799 --> Instance-2 specific Radius-Disconnect-Msg-VIP & PORT
exit
exit
exit