Page 1 of 1

Forwarding Radius authentication traffic to specific WAN

Posted: Tue Nov 28, 2023 5:39 am
by papayeya
Greetings,

I have 2 WANS that I,want it to be bonded

WAN 1 has public IP
WAN 2 has private IP


I have also an external radius server in a,different country

We can receive only the authentication traffic and messages via the public IP port (WAN 1)

Therefore when we bond the 2 WANs how we can forward the authentication traffic through WAN 1 and the interenet traffic can flow from both WAN 1 & 2?



Thanks in advance

Re: Forwarding Radisu authentication traffic to specific WAN

Posted: Wed Nov 29, 2023 1:00 am
by sindy
Simply by adding a /32 route to the address of the RADIUS server via WAN 1 gateway to all routing tables, so regardless which routing table the "bonding" (actually, it's most likely load distribution) chooses, the packets to the RADIUS server will always go via WAN 1.

Re: Forwarding Radius authentication traffic to specific WAN

Posted: Wed Nov 29, 2023 4:44 am
by LdB
It's actually easier than that on the radius setup you can set a source IP (on winbox it's the last entry right down the bottom).

So just set WAN1 public IP as the source IP for the radius server and it will exit that interface.

Re: Forwarding Radius authentication traffic to specific WAN

Posted: Wed Nov 29, 2023 10:07 am
by sindy
So just set WAN1 public IP as the source IP for the radius server and it will exit that interface.
It doesn't work this simple. The regular routing only takes into account the destination address. So without adding a routing rule or a mangle rule that would order which routing table to use based on the source address, forcing a particular source address is not sufficient to make a packet always leave through the interface to which that source address is attached.

And for this particular case, a /32 route seemed simpler to me than a dedicated routing table and a corresponding routing rule. But from 4 routing tables up, adding a 5th one this way requires less configuration rows than adding the same route to all the other tables.