RSA Radius authentication on Cisco 3000 Concentrator

[larpmgsr]

I'm in the process of evalutating RSA SecureID and Radius server verision 6.1 In order for my new VPN Client to use RSA for Radius Authentication.

I have to move the order of RSA Authentication server to the top of the list of authentication servers on the Cisco 3000. When I do that, the existing Cisco VPN clients don’t work (members of a different group authorizing to Cisco ACE)

If I move the RSA Radius server further down the list, the Cisco VPN clients work authenticating to ACE but the SecureID group authenticating to RSA on the Cisco VPN client fails.

Is there a way so that no matter which order the Radius servers are setup on the Cisco 3000, that the client will find the right Radius server dependent on what group is defined on the Cisco VPN client?

[Richard Burts]

Paul

In addition to the global definition of authentication servers which you are talking about, there is an option in the group definition on the concentrator to define an authentication server for that group. I suggest that you go to the configuration screen for the group which should use radius and define the readius server for that group.

HTH

Rick