cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
882
Views
0
Helpful
0
Comments
TCC_2
Level 10
Level 10

Resolution

You can configure the PIX Firewall with a backup ACS server for VPN Clients if the primary server goes down.

In order to accomplish this, complete these steps:
  1. Configure the primary ACS server with the host name and key.

  2. Configure the secondary ACS server with the host name and key.

  3. Bind the authentication server with crypto map.

  4. Use these commands in order to complete the configuration:

    aaa-server ACS-RADIUS (inside) host X.X.X.X (key)  timeout 5

    aaa-server ACS-RADIUS (inside) host Y.Y.Y.Y (key)  timeout 5

    crypto map vpnmap client authentication ACS-RADIUS LOCAL

Note: Within the crypto map, you can only enter one external authentication server group. The failover or backup authentication method can only be set to LOCAL. The second server in the list is only queried if the primary server is unresponsive. If the primary server is queried and issues a failed response, then the secondary server is not queried.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: