Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Load Balancing for Pulse Policy Secure based on Calling-Station-Id Radius Attribute
Pulse Policy Secure (PPS), is a next-gen Network Access Control (NAC) solution which provides role-based access and endpoint security for users and devices. PPS includes an embedded, enterprise-class RADIUS server, providing centralized authentication, authorization, and accounting (known as AAA) management - and for large-scale projects, it is useful to provide load-balancing between PPS instances to ensure enterprise-wide performance and reliability.
Two of our solutions architects, Olivier Frelastre and Nick Bond, created this example, which shows how to use Pulse vTM to load-balance an active-active pair of PPS instances, providing full redundancy and failover for your RADIUS authentication service.
It is important to set up session persistence, to ensure that users and devices are associated with the same PPS appliance for continuity, and it is common to do this with the IP address - however, it is more effective to use the Calling-Station-Id from the Radius Attribute (eg, device MAC address).
In this example, they use the radius.getCallingStationId() TrafficScript function to manage session persistence across the PPS cluster: