topic I would not have thought this in Network Security

Radius auth to standby ASA in Active Active Failover

mahesh18 — Tue, 12 Mar 2019 04:19:08 GMT

Hi Everyone,

When ASA is in Active/standby failover i can ssh to standby ASA using Radius.

But when ASA is in multi context mode Active/Active failover i can not do Radius Auth to standby ASA?

Is this default behaviour?

Regards

MAhesh

I would not have thought this

Marius Gunnerud — Wed, 11 Jun 2014 07:18:17 GMT

I would not have thought this is the default behavior...but then again, I have never tested this. If you console into the standby context issue the command show run | in aaa. Which authentication database is indicated?

Please remember to select a correct answer and rate helpful posts

That is not the default

Collin Clark — Wed, 11 Jun 2014 18:10:13 GMT

That is not the default behavior. Make sure you have all the IP's in your AAA server.

That is not the default

Collin Clark — Wed, 11 Jun 2014 18:10:30 GMT

That is not the default behavior. Make sure you have all the IP's in your AAA server.

Hi Marius,both ASA active

mahesh18 — Wed, 11 Jun 2014 19:32:15 GMT

Hi Marius,

both ASA active and standby in Active/active failover when i run the command

sh run | inc aaa

have same config with radius as protocol and same radius servers.

Regards

MAhesh

Hi Collin,Both ASA have same

mahesh18 — Wed, 11 Jun 2014 19:33:15 GMT

Hi Collin,

Both ASA have same IP's in their AAA server group.

Regards

MAhesh

Also when i run command sh

mahesh18 — Wed, 11 Jun 2014 19:38:48 GMT

Also when i run command sh aaa-server on standby ASA it shows

Server status as Failed,Server disabled at

Regards

MAhesh

I think Collin was talking

Marvin Rhoads — Wed, 11 Jun 2014 19:49:48 GMT

I think Collin was talking about having the IP addresses for both the Active and Standby ASA (for each context) in your RADIUS server.

Will check Entries of IP in

mahesh18 — Wed, 11 Jun 2014 20:02:19 GMT

Will check Entries of IP in radius.