Forum Discussion
RADIUS persistence
Which type of persistence profile needs to be configured which will define the timeout etc alongwith a RADIUS profile which is configured with a persist attribute?
3 Replies
- StephanManthey
Nacreous
As there is no timeout parameter in the profile I would guess a kind of hashing will be applied.
To be on the safe side you can cross check on your own by monitoring the persistence table:
watch -d tmsh show ltm persist persist-recordsOr the verbose version:
watch -d tmsh show ltm persist persist-records all-propertiesSorry for not beeing able to provide a better answer.
- jrodrigues_1626Historic F5 Account
Hi,
I'm working on something similar to this one. At least on version 11.5.2, this is based on Universal persistence and not on hash, although configured in the RADIUS Profile.
In Profiles -> Services -> Radius -> CustomRadiusProfile, configure the following: Persist Attribute = 1 (i.e. AVP User Name) Susbcriber Aware = Enabled Subscriber ID Type = User Name
Need to configure a universal persistence profile to define: - Match accorss services, virtual servers and pools - Manage persistence timeout
Assign both profiles to the Radius Virtual Server, generate traffic, and looking at persistence records:
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) show ltm persistence persist-records Sys::Persistent Connections universal f5user1 10.128.10.101:1812 10.128.20.21:1812 (tmm: 1) Total records returned: 1 root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)
WAIT THE TIME DEFINED TIMEOUT OF THE UNIVERSAL PERSISTENCE PROFILEroot@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) show ltm persistence persist-records Sys::Persistent Connections Total records returned: 0 root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)
Cheers João
- jrodrigues_1626Historic F5 Account
Hi,
I'm working on something similar to this one. At least on version 11.5.2, this is based on Universal persistence and not on hash, although configured in the RADIUS Profile.
In Profiles -> Services -> Radius -> CustomRadiusProfile, configure the following: Persist Attribute = 1 (i.e. AVP User Name) Susbcriber Aware = Enabled Subscriber ID Type = User Name
Need to configure a universal persistence profile to define: - Match accorss services, virtual servers and pools - Manage persistence timeout
Assign both profiles to the Radius Virtual Server, generate traffic, and looking at persistence records:
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) show ltm persistence persist-records Sys::Persistent Connections universal f5user1 10.128.10.101:1812 10.128.20.21:1812 (tmm: 1) Total records returned: 1 root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)
*** WAIT THE TIME DEFINED TIMEOUT OF THE UNIVERSAL PERSISTENCE PROFILE ***
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) show ltm persistence persist-records Sys::Persistent Connections Total records returned: 0 root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)
Cheers João
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com