what is the difference using server group instead of using multiple radius-server commands?
And ý have one more question: In PIX, when primary ACS goes down secondary ACS take the job. and even primary one comes back secondary ACS is used. Is this behaviour same on IOS, too? or in IOS is the primary ACS always been checked?
I think the idea of having 'server-group' is to group existing RADIUS servers for use in the method lists in the aaa commands. This makes the configuration easier when multiple servers are used for backup. Can anyone see add if there is any other difference? Thank you.
thanks for your reply. and I want to add one more thing about server group: I think the main idea behind this feaute is ability to use different aaa server groups for different purposes. For instance; one group for login authentication, another group for ppp.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...