Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Concentrator - Backup for user authentication

Users in group <VPN_RAS> should be authenticated via RADIUS. Therefore, I have set the ipsec authentication to RADIUS. Everything is working fine, but when RADIUS Server is not reachable, users cannot connect via the concentrator.

In this situation, the concentrator should switch over to the internal server process. Is this possible?

Thanks

Edgar

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Concentrator - Backup for user authentication

Once you set up a group to use Radius authentication, then it will only use Radius authentication, it won't fail over to theInternal database in the event of a failure.

What you can do is configure a second Radius server in the concentrator, and if it gets no response from the first one it will failover and try the second. As I said though, it won't failover to a different authentication mechanism.

1 REPLY
Cisco Employee

Re: Concentrator - Backup for user authentication

Once you set up a group to use Radius authentication, then it will only use Radius authentication, it won't fail over to theInternal database in the event of a failure.

What you can do is configure a second Radius server in the concentrator, and if it gets no response from the first one it will failover and try the second. As I said though, it won't failover to a different authentication mechanism.

69
Views
0
Helpful
1
Replies
CreatePlease to create content