[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Comments on "practical deployments"



> > It will be interesting to see how well it works.  I have previously been
> > involved in a number of
> > inter-domain roaming trials.  When the RADIUS traffic was routed through
> > an exchange point,
> > the results were not very promising.  With packet loss rates of 1-5%,
>
>   I'll track the tests, and see if we can do some measurements under load.
>
>   For existing (non-EAP) proxies, I don't recall seeing loss rates that
> high.  I'll go check, but I think latencies and loss have decreased,
> while bandwidth has increased in the net.  Plus, most RADIUS
> interconnects are now done over Ipsec, which helps with the underlying
> reliability.

This is why we dug out RadSec. The network backbone we are using typically 
performs a lot better than 1-5% losses, but still the number of packets 
involved in an EAP auth almost cries for a reliable transport.

IPSec was deployed (maybe still is, I can try to find out), but according to 
the admin there it was a real pain in the ... various parts of the body.

Greetings,

Stefan Winter

-- 

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter@restena.lu     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473

Attachment: signature.asc
Description: This is a digitally signed message part.