For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rama_126066's avatar
Rama_126066
Icon for Nimbostratus rankNimbostratus
Sep 26, 2013

RADIUS persistence

Which type of persistence profile needs to be configured which will define the timeout etc alongwith a RADIUS profile which is configured with a persist attribute?  
design
TMSH
jrodrigues_1626's avatar
jrodrigues_1626
Historic F5 Account
May 20, 2015

Hi,

 

I'm working on something similar to this one. At least on version 11.5.2, this is based on Universal persistence and not on hash, although configured in the RADIUS Profile.

 

In Profiles -> Services -> Radius -> CustomRadiusProfile, configure the following: Persist Attribute = 1 (i.e. AVP User Name) Susbcriber Aware = Enabled Subscriber ID Type = User Name

 

Need to configure a universal persistence profile to define: - Match accorss services, virtual servers and pools - Manage persistence timeout

 

Assign both profiles to the Radius Virtual Server, generate traffic, and looking at persistence records:

 

root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) show ltm persistence persist-records Sys::Persistent Connections universal f5user1 10.128.10.101:1812 10.128.20.21:1812 (tmm: 1) Total records returned: 1 root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)

 

WAIT THE TIME DEFINED TIMEOUT OF THE UNIVERSAL PERSISTENCE PROFILE

root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos) show ltm persistence persist-records Sys::Persistent Connections Total records returned: 0 root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)

 

Cheers João