Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

WLC RADIUS Fallback Questions

We would like to configure RADIUS fallback to ensure RADIUS authentications always go to their primary ACS while it's available, but the documentation is not very clear with regard to the username configuration.

There is no mention of a password, but if you enable fallback - even with the default "cisco-probe" username, failures of that account show up on the ACS server log, so I'm assuming it's not working.

Can someone shed some light on how exactly this "cisco-probe" should work?

Thanks!

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions

WLS RADIUS Fallback Questions

There are three modes to fall back:

off - no fallback

passive - WLC sends the credentials to the 'dead' server when a user tries to authenticate

on - You configure a username, and an interval.  WLC sends the credentials to the 'dead' server at configured interval.

The password really doesn't matter, just that the WLC gets a packet back.  So getting a reject back from the server would bring it back 'alive' in the AAA list.

make sense?

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
2 REPLIES

WLS RADIUS Fallback Questions

There are three modes to fall back:

off - no fallback

passive - WLC sends the credentials to the 'dead' server when a user tries to authenticate

on - You configure a username, and an interval.  WLC sends the credentials to the 'dead' server at configured interval.

The password really doesn't matter, just that the WLC gets a packet back.  So getting a reject back from the server would bring it back 'alive' in the AAA list.

make sense?

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

WLC RADIUS Fallback Questions

Ah, yes, that does make sense.  Thank you for that explanation.  It would be nice if that is mentioned in the documentation.

2967
Views
5
Helpful
2
Replies
CreatePlease to create content