I'm using two Windows 2003 Servers with local users as External User Databases (so they're both usind the \LOCAL domain) for my ACS 4.2 appliance. I've added the machines as Windows Remote Agents and configured them as Primary and Secondary Remote Agents. In general, all this works great including the failover. However, if the primay machine actually fails, it takes about 10 - 15 minutes until the ACS uses the secondary server for authentication. Is there any way to adjust the failover timers? As far as I understand, the Remote Agent response timeout setting on the Remote Agent selection page is only for retrieving the Windows groups for group mapping. I've lowered this setting but it didn't have an effect on my problem.
Can anybody tell me more about the failover mechanism here? Does the ACS simply wait for the Primary Remote Agent for a while and then proceed to the Secondary? How long is failover supposed to take? Can any adjustments be made?
Any hints will be much appreciated!