topic Re: Multiple Groups in Radius in Network Access Control https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554477#M426707 <HTML><HEAD></HEAD><BODY><P>Not all RADIUS servers are created equal... which one are you talking about?</P></BODY></HTML> Mon, 07 Aug 2006 07:40:54 GMT darpotter 2006-08-07T07:40:54Z Multiple Groups in Radius https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554476#M426706 <P>HI all - </P><P></P><P>Quick questions that will be easy for all you experts. I am using Juniper Steel-belted Radius for Remote Access Authenticaion off of our Concentrator right now. I want to start deploying 802.1x for vlan assignment and login authentication for the network boxes. </P><P></P><P>I have been looking around here, and have deducted that Radius has difficulties when you have the same username in multiple groups. Currently, the domain group VPNUSERS is allowing remote access, and that pretty much encompasses all the 1000+ employess for the company. For login authentication, I added a check list for the VPNUSERS (to ensure not everyone can login into my switches) group on the radius server to only allow requests from that of the concentrator, but if I create a new AD group (NETADMINS), put the users that will be allowed to login to the individual network devices, add that group as a user on the radius box, I am receiving an authentication failed error.</P><P></P><P>Is this because those usernames are currently being denied because those usernames are also a part of the VPNUSERS group, which is failing authentication because the attributes don't match according to the check list? Is there anyway around this without having multiple radius server groups on the network. Thanks for the help.</P> Sun, 10 Mar 2019 21:41:52 GMT https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554476#M426706 ryan.bachman 2019-03-10T21:41:52Z Re: Multiple Groups in Radius https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554477#M426707 <HTML><HEAD></HEAD><BODY><P>Not all RADIUS servers are created equal... which one are you talking about?</P></BODY></HTML> Mon, 07 Aug 2006 07:40:54 GMT https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554477#M426707 darpotter 2006-08-07T07:40:54Z Re: Multiple Groups in Radius https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554478#M426711 <HTML><HEAD></HEAD><BODY><P>Juniper (funk) Steel Belted Radius. v5.02</P></BODY></HTML> Mon, 07 Aug 2006 12:59:47 GMT https://community.cisco.com/t5/network-access-control/multiple-groups-in-radius/m-p/554478#M426711 ryan.bachman 2006-08-07T12:59:47Z