topic Windows 2003 IAS -&gt; RADIUS query in Network Access Control https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490618#M427975 <P>I have a Primary Win 2k3 AD &amp; an additional Win 2k3 AD which I'm using as RADIUS server for my PIX-515E VPN clients. In the list of RADIUS Servers in PIX I have already defined both of them, but I find tht if 1 of these Server's r down the AAA request doesnt get forwarded to the other Server &amp; hence my VPN authentication fails. Both the Servers r otherwise functioning perfectly as RADIUS Servers. Can some1 help me out with this. Thnx in advance.</P> Sun, 10 Mar 2019 21:25:02 GMT baudhayan 2019-03-10T21:25:02Z Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490618#M427975 <P>I have a Primary Win 2k3 AD &amp; an additional Win 2k3 AD which I'm using as RADIUS server for my PIX-515E VPN clients. In the list of RADIUS Servers in PIX I have already defined both of them, but I find tht if 1 of these Server's r down the AAA request doesnt get forwarded to the other Server &amp; hence my VPN authentication fails. Both the Servers r otherwise functioning perfectly as RADIUS Servers. Can some1 help me out with this. Thnx in advance.</P> Sun, 10 Mar 2019 21:25:02 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490618#M427975 baudhayan 2019-03-10T21:25:02Z Re: Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490619#M427976 <HTML><HEAD></HEAD><BODY><P>Can you post the part of your config that has to do with the radius server.</P><P></P><P>Patrick</P></BODY></HTML> Sat, 31 Dec 2005 22:11:02 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490619#M427976 Patrick Laidlaw 2005-12-31T22:11:02Z Re: Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490620#M427977 <HTML><HEAD></HEAD><BODY><P>aaa-server RADIUS protocol radius</P><P>aaa-server RADIUS max-failed-attempts 3</P><P>aaa-server RADIUS deadtime 10</P><P>aaa-server RADIUS (inside) host AMDomainController2 <SHARED-SECRET> timeout 5</SHARED-SECRET></P><P>aaa-server RADIUS (inside) host AMDomainController1 <SHARED-SECRET> timeout 5</SHARED-SECRET></P><P>..............</P><P>crypto map outside_map client authentication RADIUS LOCAL</P></BODY></HTML> Sun, 01 Jan 2006 07:28:41 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490620#M427977 baudhayan 2006-01-01T07:28:41Z Re: Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490621#M427978 <HTML><HEAD></HEAD><BODY><P>Have you checked the Windows Event Viewer (System) for the IAS entries for the failed VPN attempts? Why do you have LOCAL defined as an authentication group? If one Radius server fails, is the PIX trying to LOCAL-ly authenticate the users? Take out the LOCAL at the end of your crypto map statement and see what happens.</P></BODY></HTML> Fri, 06 Jan 2006 04:05:49 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490621#M427978 srue 2006-01-06T04:05:49Z Re: Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490622#M427979 <HTML><HEAD></HEAD><BODY><P>I cannot check the Event Viewer for IAS failed attempts, as a failed attempt only happens if the Server is down. Anyways I'll try 2 remove d LOCAL option &amp; c if it works. Thnx 4 ur suggestions.</P></BODY></HTML> Fri, 06 Jan 2006 13:12:19 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490622#M427979 baudhayan 2006-01-06T13:12:19Z Re: Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490623#M427980 <HTML><HEAD></HEAD><BODY><P>But you have two Windows servers acting as radius servers. Check the event viewer on the one that doesN'T go down.</P></BODY></HTML> Fri, 06 Jan 2006 13:31:41 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490623#M427980 srue 2006-01-06T13:31:41Z Re: Windows 2003 IAS -> RADIUS query https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490624#M427981 <HTML><HEAD></HEAD><BODY><P>Ichked d logs but no AAA requests were rcvd if 1 was down. Anyways removing that LOCAL option solves the problem. Thnx 1ce again.</P></BODY></HTML> Fri, 06 Jan 2006 14:05:00 GMT https://community.cisco.com/t5/network-access-control/windows-2003-ias-gt-radius-query/m-p/490624#M427981 baudhayan 2006-01-06T14:05:00Z