topic Re: When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding. in Aerohive Migrated Content

When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

cforrest — Mon, 05 Aug 2019 17:37:53 GMT

When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

Re: When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

samantha_lynn — Mon, 05 Aug 2019 20:20:39 GMT

The APs elect two Radsec proxies automatically, so when one has an issue the second one takes over. The second one would then become the primary until it had an issue, and then things would switch over to the other AP elected as the proxy (either the original one if it started responding again, or a new one would have been elected so there are always two).

Re: When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

cforrest — Mon, 05 Aug 2019 20:36:36 GMT

Is their any fail-over time between RADproxy AP's, just for a clear understanding , so if one of your proxy APs simply stopped responding does the other take over once it considers the other AP dead, does it have keepalives between them or something

Re: When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

samantha_lynn — Mon, 05 Aug 2019 21:02:40 GMT

There are keep-alive messages between the AP and the HiveManager, called echos. If the AP misses a few echos in a row, it's considered disconnected until it responds again. It would need to miss a few Radsec requests, but that should take a few seconds at most so the roll over would be fairly quick.

Re: When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

cforrest — Mon, 05 Aug 2019 21:06:36 GMT

Lastly, so in the event you have an internet outage when the AP's cannot ping the hive manager, do Authentications go direct from each AP, sorry for the ongoing query. Kind regards

Re: When you have two allocated RADSEC AP's what happens when one of them has an issue, does it prevent users connecting to an SSID which uses RADIUS, or does the secondary one automatically take control etc for my clear understanding.

samantha_lynn — Mon, 05 Aug 2019 21:10:23 GMT

No worries at all, I'm happy to answer any questions you have. You are correct, the HiveManager isn't needed to pass client traffic, the APs are designed to work as normal with or without the HiveManager connection. The APs would still need to be able to reach the internet though, so a full outage for your site where we can't get traffic past your default gateway would cause the APs to stop passing traffic as well.