Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

uy
New Member

can cisco be configured to log into 2 radius servers?

i need to have the radius information logged to tow servers for redudancy requirements.

if so what would be the sample radius part config on the cisco box?

thanks.

1 REPLY
New Member

Re: can cisco be configured to log into 2 radius servers?

You can't authenticate (login) to two radius servers - otherwise you might get conflicting responses.

You can configure your router for redundancy so that it contacts the subsequent radius servers after your primary server fails to respond. Just add additional radius-server host entries for other radius servers.

You can, however, send accounting information to more than one radius server:

Configuring AAA Broadcast Accounting

The following example shows turning on broadcast accounting using the global aaa accounting command:

aaa group server radius isp

server 1.0.0.1

server 1.0.0.2

aaa group server tacacs+ isp_customer

server 3.0.0.1

aaa accounting network default start-stop broadcast group isp group isp_customer

radius-server host 1.0.0.1

radius-server host 1.0.0.2

radius-server key key1

tacacs-server host 3.0.0.1 key key2

Detailed configuration information available here:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t1/dt_aaaba.htm#xtocid90568

HTH

Jeff

79
Views
0
Helpful
1
Replies