Radware Alteon Application Manual page 307

The following steps occur when using RADIUS/WAP persistence:
1. The user is authenticated on dialing.
The RAS sends a RADIUS authentication request on UDP port 1812 to one of the servers. Alteon
receives the authentication request. If there is no session corresponding to this request, a new
session is allocated and the client is bound to a server. Alteon then relays the authentication
request to the bound server.
2. The RAS establishes a session with the client and sends a RADIUS accounting start message to
the RADIUS server on UDP port 1813.
3. Alteon snoops on the RADIUS accounting start packet for the framed IP address attribute.
This attribute in a RADIUS accounting packet contains the IP address of the specific client (the
IP address of the wireless device).
Note: The RADIUS accounting packet and the RADIUS accounting service must share the same
rport.
4. The framed IP address attribute is used to rebind the RADIUS session to a new server.
Alteon hashes on the framed IP address to select a real server for the RADIUS accounting
session. If the framed IP address is not found in the RADIUS accounting packet, then
persistence is not maintained for the RADIUS/WAP session. The load-balancing metric of the real
server group has to be hash for RADIUS/WAP Persistence
5. When the client begins to send WAP requests to the WAP gateways on ports 9200 through 9203,
a new session is allocated and a server is bound to the WAP session.
The RADIUS session and the WAP session are now both bound to the same server because both
sessions are using the same source IP address.
Configuring WAP SLB using RADIUS/WAP Persistence
This procedure references
1. Configure Alteon for basic SLB.
>> # /cfg/slb/on
2. Configure IP addresses for the RADIUS/WAP Gateways.
>> # /cfg/slb/real 1/rip 1.1.1.100
>> Real server 1# ena
>> # /cfg/slb/real 2/rip 2.2.2.100
>> Real server 2# ena
>> # /cfg/slb/real 3/rip 3.3.3.100
>> Real server 3# ena
3. Create a group to load balance the WAP gateways.
>> # /cfg/slb/group 100
>>Real Server Group 100# metric hash
>>Real Server Group 100# add 1
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
Figure 46 - Load Balancing WAP Gateways, page
Load Balancing Special Services
301.
(Define address for WAP Gateway1)
(Enable Real Server 1)
(Define address for WAP Gateway 2)
(Enable Real Server 2)
(Define address for WAP Gateway 3)
(Enable Real Server 3)
(Define a group)
(Select hash as load-balancing
metric)
(Add Real Server 1)
307