For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sudeep_patil_35's avatar
sudeep_patil_35
Icon for Nimbostratus rankNimbostratus
Aug 29, 2018

Load balancing the ISE services Radius and HTTPS

I'm trying to load balance the Cisco ISE services Radius and HTTPS service using the F5 LTM. To setup the irule i'm following the procedure given on the Cisco portal   https://www.cisco.com/c/en/us...
application delivery
iRules
LTM
Andrew_Husking's avatar
Andrew_Husking
Icon for Cirrus rankCirrus
Dec 16, 2019

I believe the RADIUS commands are no longer allowed in the CLIENT_ACCEPTED events.

 

We solved the issue by doing priority groups to ensure that everything went to the same server.

Anonymous25's avatar
Anonymous25
Icon for Nimbostratus rankNimbostratus
Dec 16, 2019

Ah, that make more sense. We have a 5 node deployment (1 PAN, 1 MNT, 3 PSNs). We need to be able to load balance across the three PSNs on a static FQDN and keep persistence for those sessions. That is what this iRule is supposed to assist with (on LTM version 11.6).

 

As far as using Radius in Client_Accepted, this does still work. I have tested other iRules that use this format and they generate persistence records. Obviously, they have not been able to carry the persistence record from RADIUS client MAC address to HTTPS Client IP address to persist the sessions.

 

Thanks for providing your solution to the problem though!