topic multiple aaa servers for authentication in Network Access Control

multiple aaa servers for authentication

darragh long — Mon, 11 Mar 2019 03:47:40 GMT

Hi Folks,

I'm in the process of upgrading a customer's ACS. I will be doing this by cloning the existing ACS VM, and upgrading the clone offline.

Once I have upgraded the cloned ACS VM, I would like to be able to bring it on the network and test it, without having to cutover immediately to the upgraded ACS.

My question is whether it is possible to have a small number of remote devices (ideally defined by an access-list) authenticated by one radius server (in this case the upgraded ACS VM) while all other remote devices are authenticated by the existing ACS. These sessions will terminate on the same router, and will be using the same authentication method (PPP).

Thanks in advance for any help!

multiple aaa servers for authentication

Amjad Abdullah — Wed, 21 Aug 2013 11:05:43 GMT

Hi,

Better to do one thing: change the IP address of the radius servers on one or more devices to the new (upgraded) ACS server then test.

HTH

Amjad

Rating useful replies is more useful than saying "Thank you"

multiple aaa servers for authentication

Anas Naqvi — Mon, 02 Sep 2013 17:12:04 GMT

To implement load balancing, you can set up user groups and then assign groups to a specific RADIUS server.