Dennis, Those graphs looks great, could you share how you collect the data and generate the metrics?
Thanks! Dave From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Dennis Xu <d...@uoguelph.ca> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Thursday, March 15, 2018 at 11:57 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Measuring RADIUS Performance I read somewhere that Radius transaction time for 802.1x should be under 30ms. We use FreeRADIUS for 802.1X authentication. FreeRADIUS has tool radadmin which can measure radius response times. We use that tool and feed the stats to MRTG. Below are the stats from our RADIUS servers: [cid:image001.png@01D3BC54.B36FF510] Dennis Xu | Analyst III, Network Infrastructure Computing and Communications Services (CCS) | University of Guelph University Centre | 50 Stone Rd E | Guelph, ON | N1G 2W1 519-824-4120 Ext. 56217 | d...@uoguelph.ca www.uoguelph.ca/ccs | twitter.com/ccsnews | facebook.com/CCSUofG [1503076355327_PastedImage] From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jake Snyder Sent: Thursday, March 15, 2018 11:53 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Measuring RADIUS Performance I would find 2+ seconds to authenticate as horribly unacceptable. The fact that Mac auth is so much lower begs the question if there is something that is not keeping up (Like the AD environment). Might be worth checking the MaxConcurrentAPI settings on the domain, if doing certificates, make sure the OCSP or CRL server is responding quickly. 2 seconds will have impacts on association, roaming, etc. Sent from my iPhone On Mar 15, 2018, at 9:44 AM, Adam Forsyth <forsy...@luther.edu<mailto:forsy...@luther.edu>> wrote: How do you measure the performance of your RADIUS Serve? How fast is fast enough? How slow is unacceptable? We have Aruba Airwave, and its Clarity module provides me a way to measure the amount of time that RADIUS Authentication takes. For our RADIUS MAC SSID's it says it takes 63ms, and for our 802.1x SSID it says 2392ms. The settings Airwave comes with by default are that <500ms is marked green meaning good, 500 -- 1000ms is marked yellow meaning warning and >1000ms is marked read meaning poor. Of course faster is always better, but I wondered if others have opinions on whether Airwave's ranges are reasonable, or whether they have unrealisticly expectations. If they're reasonable, then I probably need to figure out how to speed up our 802.1x RADIUS performance. -- Adam Forsyth Director of Network and Systems Luther College Information Technology Services 700 College Drive Decorah, IA 52101 563-387-1402 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_discuss&d=DwMGaQ&c=WO-RGvefibhHBZq3fL85hQ&r=MOrPzn96ki798xbUwXJc6Hbb8ZwV-Df1GCkE26WPyzg&m=9B3e9sLCvg3u2sk8zRFBIEzS3K3AujxVfBMS3iX2G1g&s=AvUP8kD4FESbr42POh07_we0JslgEcXMurDHhdPdAFo&e=>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_discuss&d=DwMGaQ&c=WO-RGvefibhHBZq3fL85hQ&r=MOrPzn96ki798xbUwXJc6Hbb8ZwV-Df1GCkE26WPyzg&m=9B3e9sLCvg3u2sk8zRFBIEzS3K3AujxVfBMS3iX2G1g&s=AvUP8kD4FESbr42POh07_we0JslgEcXMurDHhdPdAFo&e=>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_discuss&d=DwMGaQ&c=WO-RGvefibhHBZq3fL85hQ&r=MOrPzn96ki798xbUwXJc6Hbb8ZwV-Df1GCkE26WPyzg&m=9B3e9sLCvg3u2sk8zRFBIEzS3K3AujxVfBMS3iX2G1g&s=AvUP8kD4FESbr42POh07_we0JslgEcXMurDHhdPdAFo&e=>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
