Forum Discussion

Mdussart_387769's avatar
Mdussart_387769
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

NPS Radius and F5 Load balancing ?

Hello,

 

I am currently doing an internship and setting up a Radius NPS server (Windows 2016) for the company i work for.

 

I managed to get the authentification to with certificats (EAP-TLS)with a basic setup ( Supplicant->switch->NPS ) but we are now planning to see if we can set up some load Balancing using an F5 Big-IP.

 

So basically the idea is to remplace the usual NPS proxy by a F5 VIP.

 

Supplicants->Switches->F5 VIP->multiples NPS servers.

 

Would that be possible ?

 

Thanks you !

 

BIG-IP
Super-NetOps
  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Apr 04, 2019

    Hi Mdussart,

     

    Would that be possible ?

     

    Everything is possible with iRules. The more interesting question would be at which price tag... ;-)

     

    To become able to make any recommendations, I think I need to understand your scenario slightly better.

     

    1.) Do you need just a VIP to load balance the incomming Radius Sessions to a pool of equally configured NPS servers? This will be easy...

     

    2.) Do you need a VIP to parse, rewrite or manipulate the incomming RADIUS requests an forward them based on certain request information (e.g. Realms) to multiple independent NPS servers?

     

    Cheers, Kai