topic Re: AAA authentication with RADIUS in Network Access Control https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687488#M238893 <HTML><HEAD></HEAD><BODY><P>Hi Anisha</P><P></P><P>Please correct me if i'm wrong.</P><P></P><P>You mean secondary server will be used if router check either primary server fail or uable to access to service port?</P></BODY></HTML> Sat, 09 Apr 2011 05:53:06 GMT Rojer-bkk 2011-04-09T05:53:06Z AAA authentication with RADIUS https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687486#M238888 <P>Hi,</P><P></P><P>aaa authentication login user-list group radius local</P><P>!</P><P>radius-server host 10.1.1.3 auth-port 1645 acct-port 1646 key xxxx</P><P>radius-server deadtime 10</P><P></P><P>If i add more radius-server host such as</P><P></P><P>radius-server host 10.1.1.4 auth-port 1645 acct-port 1646 key xxxx</P><P></P><P>1. Server 10.1.1.4 will be backup for server 10.1.1.3?</P><P>2. Can i configure to be radius group?</P><P></P><P>Thanks</P> Mon, 11 Mar 2019 00:58:47 GMT https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687486#M238888 Rojer-bkk 2019-03-11T00:58:47Z Re: AAA authentication with RADIUS https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687487#M238890 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>you can try the following:</P><P></P><DIV>Router(config)# aaa group server radius <GROUP-NAME></GROUP-NAME></DIV><DIV>Router(config-sg radius)# server 10.1.1.3</DIV><DIV>Router(config-sg radius)# server 10.1.1.4</DIV><DIV><BR /></DIV><P>when you configure the aaa group like this 10.1.1.3 will be primary and 10.1.1.4 is secondary </P><P></P><P>Hope this helps.</P><P></P><P>Regards,</P><P>Anisha</P><P></P><P>P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.</P></BODY></HTML> Fri, 08 Apr 2011 19:31:30 GMT https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687487#M238890 andamani 2011-04-08T19:31:30Z Re: AAA authentication with RADIUS https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687488#M238893 <HTML><HEAD></HEAD><BODY><P>Hi Anisha</P><P></P><P>Please correct me if i'm wrong.</P><P></P><P>You mean secondary server will be used if router check either primary server fail or uable to access to service port?</P></BODY></HTML> Sat, 09 Apr 2011 05:53:06 GMT https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687488#M238893 Rojer-bkk 2011-04-09T05:53:06Z Re: AAA authentication with RADIUS https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687489#M238894 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>The secondary server will be checked only when the primary server is not reachable.</P><P></P><P>Hope this helps.</P><P></P><P>Regards,</P><P>Anisha</P><P></P><P>P.S.: please mark this thread as answered, if you feel your query is resolved. Do rate helpful posts.</P></BODY></HTML> Sun, 10 Apr 2011 01:39:17 GMT https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687489#M238894 andamani 2011-04-10T01:39:17Z Re: AAA authentication with RADIUS https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687490#M238895 <HTML><HEAD></HEAD><BODY><P>Hi Anisha,</P><P></P><P>If router authenticate via secondary host, can i force router back to authenticate through primary RADIUS host? or router can do if it check primary host back? Thanks for feedback</P></BODY></HTML> Tue, 12 Apr 2011 05:24:54 GMT https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687490#M238895 Rojer-bkk 2011-04-12T05:24:54Z Re: AAA authentication with RADIUS https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687491#M238896 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>The router will not check the primary server on its own if the session is up with the secondary server.</P><P></P><P>you need to make the secondry server unreachable and then it will check for the primary server and autenticate if the server is up.</P><P></P><P>Hope this helps.</P><P></P><P>Regards,</P><P>Anisha</P><P></P><P>P.S.: please mark this thread as&nbsp; answered, if you feel your query is resolved. Do rate helpful posts.</P></BODY></HTML> Tue, 12 Apr 2011 05:33:35 GMT https://community.cisco.com/t5/network-access-control/aaa-authentication-with-radius/m-p/1687491#M238896 andamani 2011-04-12T05:33:35Z