topic Re: Radius authentication for VPN client in Network Access Control

Radius authentication for VPN client

jimmyjoseph — Fri, 21 Feb 2020 18:05:23 GMT

Hi,

I'm using cisco vpn client 3.5 for my mobile users to connect to the network through the Pix 515 firewall. The users are getting authenticated using a Win 2000 server over RADIUS using "aaa-server" command

This command allows me to mention only one server for authentication. Is there a way to mention one more server as standby authentication server which can handle authentication requests in case the primary fails.

Also can i mention a local username and password which myself as an administrator could use for authentication in case the firewall is not able to contact the Radius server?

Thanks and Regards,

jimmy

Re: Radius authentication for VPN client

kdurrett — Mon, 18 Nov 2002 21:35:41 GMT

Q. Is there a way to mention one more server as standby authentication server which can handle authentication requests in case the primary fails?

A. Yes, just specify the new server with your aaa-server commands, but it will only go to the second server if the primary doesnt respond. If the primary does respond, as if its denied, it wont go to the seconday.

Q. Also can i mention a local username and password which myself as an administrator could use for authentication in case the firewall is not able to contact the Radius server?

A. Sorry, can't do this yet, not for VPN anyhow.