[strongSwan] Should each StrongSwan have its own FreeRadius or should they share one?

[Houman]

Hello,

I have multiple StrongSwan VPN servers setup and each of them has its own
FreeRadius server. Each of the freeradius servers then points to the
central database in a separate location. This works without any problem.
But I wonder if this is the right approach after all.

Maybe I should have only one FreeRadius server installed next to the
database, and have each VPN server connect to the central freeradius server
instead?

As in setting *accounting = yes* and *address= [remote IP of freeradius
server]* in /etc/strongswan.d/charon/eap-radius.conf for each VPN.

What is the most optimal way?

Many Thanks,
Houman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20190821/9889f8d1/attachment.html>