We have also been looking at response times… We also have Airwave and what stands out the most is if you look at the details page under clarity for Authentication, you will see the breakdown of the servers and client responses. I find that given that airwave is only polling at time (t) the number provided by clarity is an average of all the “Client + Server” response times. I use it with a grain of salt. We use Radiator as our Radius, and it has the ability to give the statistics required for a complete Authentication, which we are finding is less than 10ms. Client devices and controller resources also affect these numbers in airwave. We also have 7Signal in the environment to monitor our large high density classrooms and it gives another perspective, but generally the total response time for an authentication has been around 120ms..
[cid:200BA0D2-AF24-4DFE-A4E0-0EF420689038@uwo.ca] On Mar 15, 2018, at 1:20 PM, Kenny, Eric <eric_ke...@harvard.edu<mailto:eric_ke...@harvard.edu>> wrote: Hi Adam, We use Aruba ClearPass for our back end MAC and 802.1x authentication. They recommend the authentication request take less than 150ms to complete. We typically see between 50 and 150 ms for 802.1x and 200 to 250 for mac auth. This is highly subjective based on the complexity of your enforcement policies. A few month ago we ran into a major issue that only affected Mac OS X devices running 10.12 and up, where if the authentication took longer than 300 ms to process, the device would fail to associate to the wireless network. We went back and forth with Apple on that but never really got to the bottom of what broke in their network stack. ClearPass has built in monitoring for request processing time. <PastedGraphic-1.png> From what I’ve seen reported in Airwave, it seems that the authentication processing time is less than what is reported in ClearPass. For example, one device authenticating on 802.1x, ClearPass shows "Request processing time = 269 ms” and below is what Airwave reports. <PastedGraphic-2.png> ----------------------------------- Eric Kenny Network Architect Harvard University IT ----------------------------------- On Mar 15, 2018, at 11:44 AM, Adam Forsyth <forsy...@luther.edu<mailto:forsy...@luther.edu>> wrote: How do you measure the performance of your RADIUS Serve? How fast is fast enough? How slow is unacceptable? We have Aruba Airwave, and its Clarity module provides me a way to measure the amount of time that RADIUS Authentication takes. For our RADIUS MAC SSID's it says it takes 63ms, and for our 802.1x SSID it says 2392ms. The settings Airwave comes with by default are that <500ms is marked green meaning good, 500 -- 1000ms is marked yellow meaning warning and >1000ms is marked read meaning poor. Of course faster is always better, but I wondered if others have opinions on whether Airwave's ranges are reasonable, or whether they have unrealisticly expectations. If they're reasonable, then I probably need to figure out how to speed up our 802.1x RADIUS performance. -- Adam Forsyth Director of Network and Systems Luther College Information Technology Services 700 College Drive Decorah, IA 52101 563-387-1402 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
