Re: can cisco be configured to log into 2 radius servers?
You can't authenticate (login) to two radius servers - otherwise you might get conflicting responses.
You can configure your router for redundancy so that it contacts the subsequent radius servers after your primary server fails to respond. Just add additional radius-server host entries for other radius servers.
You can, however, send accounting information to more than one radius server:
Configuring AAA Broadcast Accounting
The following example shows turning on broadcast accounting using the global aaa accounting command:
aaa group server radius isp
aaa group server tacacs+ isp_customer
aaa accounting network default start-stop broadcast group isp group isp_customer
radius-server host 220.127.116.11
radius-server host 18.104.22.168
radius-server key key1
tacacs-server host 22.214.171.124 key key2
Detailed configuration information available here:
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...