Sample RADIUS load balancing configuration
The Citrix Adaptive Authentication instance provides RADIUS support using a load balancing virtual server.
Note:
- If you are not using load balancing for RADIUS, avoid creating a service or a server for a RADIUS server as this might break the Adaptive Authentication tunnel.
- If you are using load balancing for RADIUS, create a service group and bind your RADIUS servers to it.
- When using load balancing virtual server for authentication, ensure that you add the load balancing virtual server IP address instead of the actual RADIUS server IP address in the RADIUS action.
- By default, a ping monitor is bound to the service that you create. On the Adaptive Authentication NetScaler® instances, the service will not come up using ping monitors. You need to create RADIUS monitors and bind it to the service group that you have created.
- For monitoring, it is recommended that you use custom monitors.
- Ping monitors are not supported, you must create RADIUS monitors.
Prerequisites
Private IP address (RFC1918 address) of the load balancing virtual server. It can be a dummy IP address as this address is used for internal configuration.
Load balancing RADIUS servers
For load balancing RADIUS servers, create a service group and bind it to the load balancing virtual server. Do not create a service for load balancing RADIUS servers.
Configure RADIUS by using the NetScaler CLI
You can use the following CLI commands as a reference to configure RADIUS.
add serviceGroup <serviceGroupName> <serviceType>bind servicegroup <serviceGroupName> (<IP> | <serverName>) <port>add lb vserver <name> <serviceType> <ip> <port>bind lb vserver <name> <serviceGroupName>add authentication radiusAction <name> {-serverIP} <ip_addr> | {-serverName <string>}} <lb vserver ip>add authentication policy <radius_policy_name> -rule <expression> -action <string>bind authentication vserver auth_vs -policy <radius_policy_name> -priority <radius_policy_priority> -gotoPriorityExpression NEXT
Configure RADIUS by using the NetScaler GUI
- Navigate to Traffic Management > Load Balancing and then click Virtual Servers.
- Create a virtual server of type RADIUS.
- Navigate to Traffic Management > Load Balancing and then click Service Groups.
- Create a service group of type RADIUS.
- Bind the service group to the virtual server that you have created in step 1.
For details on the procedures, see Set up basic load balancing.
Create custom monitors by using the NetScaler GUI
- Navigate to Traffic Management > Load Balancing > Monitors.
- Create a monitor of type RADIUS. Ensure that you set the monitor probe interval to 15 seconds and the response timeout to 10 sec.
- Bind this monitor to your service group.
For more details, see Custom monitors.
Sample RADIUS load balancing configuration
Copied!
Failed!