General

Authentication Frequency

How often is a device typically authenticating against RADIUSaaS?

This is difficult to answer as it depends on the behavior of your users, clients and networking gear (APs, NACs, switches). Additionally, it is important to note that RADIUSaaS will neither

• trigger an authentication, nor

• send a termination request via its accounting port to the client, potentially triggering a re-authentication.

If you feel your devices are authenticating very frequently (multiple times an hour) without the user constantly restarting the client, then this could be for the following reasons:

• The network controller doesn't authenticate the client fast enough for the client to join the network, so the client attempts to authenticate again. Check the network controller to see if/when it is receiving an answer from RaaS.

• The network controller is re-initiating authentication. Check the network controller for what might be causing this.

RADIUS Return Attributes

Which VLAN-related attributes does RADIUSaaS return by default?

In case you require other VLAN attributes than returned by default, please contact our support.

"WiMAX-VLAN-ID"

"Nexans-Port-Default-VLAN-ID"

"Dlink-VLAN-ID"

"UTStarcom-VLAN-ID"

"DHCP-IEEE-802.1Q-VLAN-ID"

"Motorola-WiMAX-VLAN-ID"

"Telrad-C-VLAN-ID"

"Telrad-S-VLAN-ID"

"SN-Assigned-VLAN-ID"

"Extreme-VM-VLAN-ID"

"Ruckus-VLAN-ID"

"Mikrotik-Wireless-VLANID"

"Egress-VLANID"

"HP-Egress-VLANID"

"Tunnel-Private-Group-Id"

Secondary Instance and Failover

A secondary instance means that you have at least a secondary RadSec server that works independently of your main instance but has the same configuration. If you have one, you can see multiple IP Addresses under RadSec IP Addresses.

Since there are independent from each other, those RadSec servers will not handle any kind of failover. You should add both IP addresses to your Network controller which decides to which server the Authentication requests are forwarded.

With your proxies, it's a little different. Your proxies know each of your RadSec instances and will take over failover if the primary server fails.