Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

secondary ciscosecure for authenication

I have one CiscoSecure as my primary access server and a second CiscoSecure access server set up as a backup server over the WAN .

can my router point to the secondary tacacs for authenication ?

or it can only point to the primary server and if the primary server fail then it will switch to the secondary for authenication.

2 REPLIES
Anonymous
N/A

Re: secondary ciscosecure for authenication

You can have the router pointed to both servers. As long as your database is synchronized, pointing router to either server as primary should work just fine.

Cisco Employee

Re: secondary ciscosecure for authenication

adding further to the post.

You can setup anyway you like, as long as the router poitns the tacacs ip address to your secondary, then it will only direct all requests there, if you point to both, then it will only use the secondary if the primary server FAILS. Another way of doing this is, on the router, you only specifiy your Primary ACS, but on ACS, you proxy all the requests to the secondary ACS. etc. OR you can do replication on ACS, this way, both ACS are synced and databases are same.

HTH

R/Yusuf

293
Views
0
Helpful
2
Replies
CreatePlease login to create content