Proxy Settings
Proxy settings are available under https://YOURNAME.radius-as-a-service.com/settings/proxy
Proxies are required when your authenticators (e.g., access points, switches) support only traditional RADIUS over UDP for AAA. The proxies handle protocol conversion from RADIUS to RadSec, enabling your equipment to communicate securely with the RADIUSaaS core servers, which support only RadSec (RADIUS over TCP) for AAA.
Architecture
Your subscription includes at least two public IP addresses capable of communicating via RADIUS. We strongly recommend configuring these IP addresses as the primary and secondary RADIUS servers on your network devices and appliances. For optimal redundancy, the secondary IP should be located in a different geographic region from the primary.
Performance
Each proxy can handle up to 1,500 concurrent connections flawlessly.
This corresponds to a time-based performance of 10,000 authentications per minute per proxy.
Scaling
To ensure smooth operation, consider the following number of proxies based on the number of users you have licensed (your needs may change if your offices are more globally distributed):
50 - 2,500
2
2,501 - 10,000
3
10,001 - 25,000
4
25,001 - 50,000
6
50,001 - 100,000
10
Regions
You can deploy the proxy servers in the following regions:
Africa
Johannesburg
Asia
Bangalore Singapore TelAviv Tokio
Australia
Sydney
Europe
Frankfurt London Madrid Stockholm
North America
Dallas New York Seattle Toronto
South America
Santiago
Load Balancing
If you have a setup with more than 1,000 users, we highly recommend ensuring, that your network equipment will send equal amounts of authentications to each proxy.
For network equipment, where you can define the priority of the RADIUS servers, you can ensure load-balancing by defining different priority orders for your different network equipment instances.
Example: You have 5 WiFi controllers and 3 RADIUS Proxies. You may then configure the following priority orders in your WiFi controllers:
1 and 4
1, 2, 3
2 and 5
2, 3, 1
3
3, 1, 2
Failover
When multiple RadSec endpoints are configured, RADIUSaaS provides an automatic failover mechanism for your RADIUS proxies.
In the unlikely event that one or more RadSec endpoints fail, the available proxies will detect the failed state and redirect requests to the (geographically) closest active RadSec endpoint.
Properties
The IP address, ports and shared secret of the RADIUS Proxies will be displayed under Server Settings > Ports and IP Addresses.
Add
To Add a new proxy, simply click Add, choose your Region and click Create.
After the installation has finished, it can take up to 15 minutes until your proxy has established a connection to your RADIUS server.
Delete
To Delete a proxy, simply click Delete of corresponding table row and confirm your choice.
Last updated
Was this helpful?