09-12-2008 01:48 AM - edited 03-10-2019 04:05 PM
Hello,
I am using a DOT1X authentication based on two IAS Windows Servers.
My access switches are C2950 and I want to work with multiple Radius server for high availibility purposes.
But when my primary IAS server falls down (is declared dead when I debug radius messages), my switch try to connect with the second one and it doesn't work.
I've got the following messages :
"Sep 12 10:22:57.412 UTC: RADIUS: Re-signed packet (key: ciscomgt; rctx: 0x80DA94
18)
Sep 12 10:22:57.412 UTC: RADIUS: Trying next server (10.4.20.112:1812,1813) for
id157
Sep 12 10:22:57.412 UTC: RADIUS: Fail-over denied to (10.4.20.112:1812,1813) for
id157
Sep 12 10:22:57.412 UTC: RADIUS: No response for id 157
It's always in "fail over state" with the second one.
With I try separetely, the two servers works correctly. When I try with a C2970 plateform it works too. Is there special recommendations with the C2950?
Thanks for your helps
Solved! Go to Solution.
09-12-2008 05:03 AM
Hi Gilou,
Please add the following command and if possible try the failover again
radius-server deadtime 1
Let me know how it goes
Regards,
~JG
Do rate helpful posts
09-12-2008 05:03 AM
Hi Gilou,
Please add the following command and if possible try the failover again
radius-server deadtime 1
Let me know how it goes
Regards,
~JG
Do rate helpful posts
09-14-2008 11:47 PM
Hi jgambhir
Thanks for the advice. The problem is resolved.
The requests are now sent and processed by the backup IAS server.
By
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide