topic Hi, in Wireless

Next RADIUS if fail authentication

adrien.dupont — Mon, 05 Jul 2021 14:08:09 GMT

Hello everyone,

I try to configure a kind of Fallback RADIUS, I explain :

Il want two radius server in my WLAN :

- In one RADIUS, we have serveral users (first AD)

- In the other one, we have the rest of our users (second AD)

Is it possible to switch to RADIUS n°2 if we have a fail with the server one. If I understand, the fallback option is use when the server is down (unrecheable) but if we have a fail authentication ?

Thank's

Adrien Dupont

NO,

Rasika Nayanajith — Thu, 01 Jun 2017 04:10:01 GMT

NO,

You get Access-Reject from first RADIUS server & that's pretty much it. Only first sever fails WLC use backup server.

HTH

Rasika

Hi,

adrien.dupont — Thu, 01 Jun 2017 07:18:25 GMT

Hi,

So it's not possible on Cisco WLC. I just want to compare with a another manufacturer, we have this option :

fail-over: Fail-over is always enabled. Fail-over means is that if the first auth-server is not reachable (time-out), the second server will be checked. That is the difference between fail-over and fail-through

But not this one :

allow-fail-through: When this option is configured, an authentication failure with the first server in the group causes the controller to attempt authentication with the next server in the list. The controller attempts authentication with each server in the ordered list until either an authentication is successful or the list of servers in the group is exhausted.

Thank you for your reply !!

Regards

Adrien Dupont

Yes, in Cisco WLC, fail over

Rasika Nayanajith — Thu, 01 Jun 2017 20:44:38 GMT

Yes, in Cisco WLC, fail over works when primary RADIUS is not reachable/ or responding.

HTH

Rasika

See here for some tuning

patoberli — Fri, 02 Jun 2017 14:06:11 GMT

See here for some tuning parameters:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/118703-technote-wlc-00.html

Hi Can you please check the

sanjee108 — Tue, 04 Jul 2017 05:45:47 GMT

Hi Can you please check the following and assist?

https://supportforums.cisco.com/discussion/13326296/configuring-radius-server-authenticating-specific-ssid