HydraWEB HydraRADIUS User manual

Table of Contents i
HydraWEB Technologies HydraRADIUS Getting Started Guide
Table of Contents
Package Contents ............................................................................................................................ 1
Introduction ...................................................................................................................................... 2
HydraRADIUS Front Panel (Exterior) ...................................................................................... 3
HydraRADIUS Front Panel (Interior) ...................................................................................... 4
HydraRADIUS Unit Back Panel .................................................................................................. 4
HydraRADIUS Standard Features ............................................................................................. 5
Before You Begin ............................................................................................................................. 6
Planning Out Your IP Addresses .....................................................................................................6
Rack-Mounting the HydraRADIUS Unit(s) ........................................................................... 8
Installing the HydraRADIUS Units (with Hot Spare) ........................................................ 9
Installing the HydraRADIUS Unit (without Hot Spare) .................................................10
Configuring HydraRADIUS Unit 1 ..........................................................................................11
Part I. Entering Network Identity Information for Unit 1 ..................................................11
Part II. Configuring Your First Cluster ........................................................................................13
Configuring HydraRADIUS Unit 2 (If Using Hot Spare) ................................................14
Testing Your Connectivity ........................................................................................................15
Logging in to HydraQ and the Administrative Menus ...................................................16
Bootstrapping Hot Spare (If Using Hot Spare) ..................................................................17
Final Check ......................................................................................................................................20
Installing HydraAgents (NT and Unix Servers) .................................................................21
Installing HydraAgents (NT Servers) .......................................................................................... 21
Installing HydraAgents (Unix Servers) ....................................................................................... 23
Where to Go from Here . . . .......................................................................................................26
Updating to a Permanent License ..........................................................................................27
Troubleshooting ............................................................................................................................31
Contacting HydraWEB Technical Support .........................................................................34
Pre-Installation IP Address Chart ...........................................................................................35
Network Identity Worksheet ...................................................................................................36
Cluster Configuration Worksheet ..........................................................................................37
HydraWEB Technologies Limited Warranty ......................................................................38
Agency Approvals .........................................................................................................................39

1 Package Contents
HydraWEB Technologies HydraRADIUS Getting Started Guide
Package Contents
Each HydraRADIUS package should contain the items shown:
HydraOS Administrator's Manual and
Power Cord
Hot Spare/Console Cable
(DB9-F to DB9-F)
Front Mounting Brackets
HydraRADIUS Getting Started Guide
HydraRADIUS Unit

Introduction 2
HydraWEB Technologies HydraRADIUS Getting Started Guide
Introduction
This Getting Started Guide is designed to help you get your HydraRADIUS unit(s) up
and running for the first time and configured for the most basic setup: load
balancing among three back-end RADIUS servers. Figure 1 illustrates this basic setup.
Note: T
HE
H
YDRA
RADIUS
IS A ROUTING DEVICE
,
AND THIS
G
ETTING
S
TARTED
G
UIDE IS INTENDED
FOR NETWORK ADMINISTRATORS WHO HAVE HAD SOME EXPERIENCE INSTALLING AND MANAGING
IP
ROUTERS
. A
KNOWLEDGE OF
RADIUS
SERVERS IS ALSO PRESUMED
. H
YDRA
RADIUS
REQUIRES
H
YDRA
OS
VERSION
2.0.2
OR HIGHER
..
Figure 1 Basic HydraRADIUS LAN Configuration
Because the configuration process introduces you to certain terminology specific to
the Hydra Operating System, you may want to refer to the HydraOS ™ Administrator’s
Manual if at any point you require a more thorough explanation of any HydraOS-
specific term.
Note: T
HROUGHOUT THIS
G
UIDE
,
THE CONVENTION
, “T
YPE
x [E
NTER
]”
WILL BE USED TO MEAN
,
“T
YPE
x
AND PRESS
E
NTER OR
R
ETURN
.”
DNS Server Hub/Switch
Hub/Switch
To R A S
RADIUS
Server
RADIUS
Server
RADIUS
Server
External
Network*
Service Network
* The term "External" in this context
is used strictly in relation to the
HydraRADIUS units. It does not imply a
network external to the overall LAN.
"Virtual" Hydra
HydraRADIUS Unit 2HydraRADIUS Unit 1

3 HydraRADIUS Front Panel (Exterior)
HydraWEB Technologies HydraRADIUS Getting Started Guide
HydraRADIUS Front Panel (Exterior)
LED Color Function
Power Green Lights up and remains lit as long as unit is on. Blinks when system is in sleep mode.
Status Amber System Fault indicator. Lights up if a system fault state is detected.
Drive Green Lights up to indicate activity on the hard drive.
Link 1 Yellow Lights up to indicate Ethernet link between Interface exp0 and the External
Network. Blinks at variable rate to indicate network activity.
100 Mbps Green Lights up if Link 1 detects and i s configured for 100 Mbps operation.
Link 2 Yellow Lights up to indicate Ethernet link between Interface exp1 and the Service
Network. Blinks at variable rate to indicate network activity.
100 Mbps Green Lights up if Link 1 detects and is configured for 100 Mbps operation.
U1/U2 Green Reserved for future use.
Power Status Drive Link Link100Mbps 100Mbps U1 U2
12
Power Drive 100Mbps
Status Link 1 Link 2 U1/U2
100Mbps

HydraRADIUS Front Panel (Interior) 4
HydraWEB Technologies HydraRADIUS Getting Started Guide
HydraRADIUS Front Panel (Interior)
HydraRADIUS Unit Back Panel
Connector Function
Floppy Drive Available for administrative use (e.g., creating an agent diskette or a backup configuration).
On/Off Powers unit on or off.
Sleep Places motherboard in sleep state.
Reset Resets the unit.
Console Port Connects unit to a VT100 terminal or PC through a serial cable (9600, n, 8, 1).
NMI Button Causes an NMI (Non-Maskable Interrupt) to be issued to the system when pressed. Used
to dump system state when system is hung.
Connector Function
Power Supply Connects wall AC to unit 115V/230V, 50/60 Hz power supply.
Interface exp0 Connects unit to the External Network through an Ethernet cable.
Interface exp1 Connects unit to the Service Network (back-end server side) through an Ethernet cable.
Hot Spare Port Connects unit to its (optional) Hot Spare counterpart.*
Floppy Drive Console Port NMI Button
ResetSleepOn/Off
Interface exp0
Interface exp1
Power
Supply Hot Spare Port
* Under normal operations, the selection of which HydraRADIUS unit is Primary and which is the Hot Spare is
random; you may therefore at times see both units referred to as “Hot Spares,” or as a “Hot Spare pair.”

5 HydraRADIUS Standard Features
HydraWEB Technologies HydraRADIUS Getting Started Guide
HydraRADIUS Standard Features
General
• Unlimited number of server licenses
• Two 10/100 Ethernet interfaces
• 1U-chassis for 19” rack mounting (requires only 1.75” height)
Reliability
• Optional Hot Spare failover
Load Balancing/Routing
• HydraWEB MultiPlexer Load Average™ (PLA) statistical load balancing algorithm
• Round-robin load balancing algorithms
• Persistency (IP source/destination)
Performance
• HydraAgent™ intelligent agent technology
• Application-aware load balancing
• HydraASP™ support for all RADIUS servers
• Enhanced custom HydraRADIUS agents available for select RADIUS servers
Management/Administration
• SNMP agent
• Web-based monitoring
• Alerting via trap, e-mail, SysLog, application, others
• Simple remote management
• Integrated Hot Spare management
• Local real-time monitoring
• Historical performance data
• Front panel indicators for link state and status

Before You Begin 6
HydraWEB Technologies HydraRADIUS Getting Started Guide
Before You Begin
Note: T
HE BASIC INSTALLATION COVERED IN THIS
G
ETTING
S
TARTED
G
UIDE ASSUMES ONLY THREE
RADIUS
SERVERS IN A SINGLE CLUSTER
.
To install and configure your HydraRADIUS unit(s) for the basic setup, the following
should already be in place on your LAN:
• A device (e.g., 10/100 hub or switch) with two available Ethernet ports, which will be used
to connect both HydraRADIUS units to your External Network* or testing clients.
• Three RADIUS servers with replicated content.
• A 10/100 hub or switch with two available Ethernet ports (plus enough ports for the back-
end RADIUS servers), which will be used to connect both HydraRADIUS units to your
Service Network.*
In addition, you will need the following:
• A VT-100 terminal or PC running asynchronous terminal emulation software, such as
HyperTerminal® for Windows® (DB9-F to DB9-F serial cable is provided).
• Five Ethernet cables to connect the Hydra units to the External and Service Networks.
Planning Out Your IP Addresses
To make your setup go as smoothly as possible, you should plan out your IP addresses
ahead of time. You are going to be setting up an IP address scheme similar to the
example shown here.
Figure 2 Typical IP Address Setup
To R A S
Hub/Switch
Hub/Switch
External
Network
Service
Network
RADIUS
Server
RADIUS
Server
RADIUS
Server
204.52.249.10
192.168.249.10
192.168.249.14 192.168.249.15 192.168.249.16
192.168.249.12
192.168.249.x =
private addresses on an unused subnet
204.52.249.x =
Internet-routable addresses
192.168.249.11
204.52.249.12
204.52.249.13
(Cluster IP address)
204.52.249.11
(Virtual Interface exp1)
(Interface exp1)
(Virtual Interface exp0) (Interface exp0)
(Interface exp0)
(Interface exp1)
HydraRADIUS Unit 1 HydraRADIUS Unit 2
"Virtual" Hydra
* See Figure 1, page 2, for meaning of the terms External Network and Service Network.

7 Before You Begin
HydraWEB Technologies HydraRADIUS Getting Started Guide
To set up your units with an IP address scheme similar to the one shown, you will
need:
• A range of private addresses on a currently unused subnet of your network.
From this subnet:
• Assign one address to each back-end RADIUS server.
• Reserve two (three, if using Hot Spare) for the HydraRADIUS unit(s) and
“Virtual” Hydra* at their Service Network, or exp1, interface.
Note: A
DDITIONAL ADDRESSES FROM THIS SUBNET MAY BE USED FOR BACK
-
END SERVERS THAT
YOU MAY ADD AT ALATER TIME.
• A range of public, Internet-routable addresses from a subnet of your existing
network. From this subnet:
• Assign one address to serve as your cluster address.
• Reserve two (three, if using Hot Spare) for the HydraRADIUS unit(s) and
“Virtual” Hydra at their External Network, or exp0, interfaces.
With these addresses ready, fill out the Network Identity Worksheet and Cluster
Configuration Worksheet located at the back of this Guide (pages 36-37). You may
want to use the Pre-Installation IP Address Chart on page 35 as an aid. In addition to
IP addresses, you will need to choose hostnames and a password.
Have these Worksheets ready as you go through the configuration.
*Theterm“Virtual” Hydra is used to denote a Hot Spare† pair (i.e., Units 1 and 2) acting in
conjunction as a single, load-balancing entity. “Virtual” is used because there is no corresponding
physical device. Within the HydraOS system, however, the “Virtual” Hydra has a discrete identity
which you define by assigning it a name and its own IP addresses. In HydraOS-specific terminology,
the “Virtual Hydra” is also referred to as the Service Router (SR).
†ThetermsHot Spare and Primary may cause initial confusion. Although Hot Spare may seem to refer
to Unit 2 during the initial configuration (e.g., when you “Bootstrap Hot Spare,” you add in Unit 2),
under normal operations the selection of which HydraRADIUS unit is Primary and which is the Hot
Spare is random. You may therefore see both Units 1 and 2 referred to as “Hot Spares,” or as a “Hot
Spare pair.”

Rack-Mounting the HydraRADIUS Unit(s) 8
HydraWEB Technologies HydraRADIUS Getting Started Guide
Rack-Mounting the HydraRADIUS Unit(s)
To rack-mount your HydraRADIUS unit using the front mounting brackets included
in your package:
1 Attach the front mounting brackets to your rack using screws provided with
your rack.
2 Mount the HydraRADIUS unit by sliding the chassis supports (fastened to
the sides of the unit) into the front mounting brackets attached to the rack,
as shown in Figure 3.
Figure 3 HydraRADIUS Front Rack Mounting Procedure
3 Using bolts provided with your rack, fasten the HydraRADIUS at its front
flanges to the rack, as shown in Figure 4. Hand-tighten screws so that you do
not overtighten them.
Figure 4 Fastening Front Flanges
Chassis supports
Front mounting
bracket
Front flange

9 Installing the HydraRADIUS Units (with Hot Spare)
HydraWEB Technologies HydraRADIUS Getting Started Guide
Installing the HydraRADIUS Units (with Hot Spare)
Figure 5 shows the completed installation layout for a Hot Spare setup.
Figure 5 Installation Layout with Hot Spare
To install the HydraRADIUS units:
1 Connect Unit 1 to Unit 2 through the Hot Spare port on the back of each
unit, using one of the Hot Spare/Console cables provided.
2 Connect Interface exp0 on Unit 1 to the hub/switch on the External
Network side, using a standard Ethernet cable. Connect Interface exp0 on
Unit 2 to the same hub/switch (External Network side).
3 Connect Interface exp1 on Unit 1 to the hub/switch on the Service Network
side, using a standard Ethernet cable. Connect Interface exp1 on Unit 2 to
the same hub/switch (Service Network side).
4 (Not shown.) Connect your PC or VT-100 terminal to the serial port on the
front inside panel of Unit 1, using the second Hot Spare/Console cable
provided.
5 Connect the power cords to the back of each unit, and plug these in to
(grounded) power outlets.
You are now ready to continue with “Configuring HydraRADIUS Unit 1,” page 11.
To R AS
10-18 VDC
0.8 A MAX
Hub/Switch (Service Network)
10-18 VDC
0.8 A MAX
Unit 1 Unit 2
To Power
Outlet
To Power
Outlet
exp1 exp1
exp0 exp0
1
3 3
2 2
55
Hot Spare/Console Cable
Hub/Switch (External Network)
Back-end RADIUS
Servers