topic WLC RADIUS Server Failover - Passive mode timer in Wireless

WLC RADIUS Server Failover - Passive mode timer

Nigel Bowden — Sun, 04 Jul 2021 05:52:00 GMT

In 7.2 WLC code, it appears it is now possible to specify which RADIUS servers are used as the preferred server for authentication (

Security > AAA > RADIUS > Fallback to open the RADIUS > Fallback Parameters ).

There are 3 mode for this: off, passive & active.

In the passive mode, the operation is described in the config guide as :

Passive

—Causes the controller to revert to a server with a lower priority from the available backup servers without using extraneous probe messages. The controller ignores all inactive servers for a time period and retries later when a RADIUS message needs to be sent.

Does anyone know how long this 'time period' is? If it is only a few seconds, then it could be that user authentications are being used to test against a failed RADIUS server frequently & will experience annoying time-out delays, causing support calls etc.

Anyone know what it is, or if its configurable? I don't see anything in the docs...

Nigel.

WLC RADIUS Server Failover - Passive mode timer

Saravanan Lakshmanan — Thu, 18 Oct 2012 23:40:43 GMT

Here you go.

RADIUS Server Fallback Feature on WLC.

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a008098987e.shtml#passive

Re: WLC RADIUS Server Failover - Passive mode timer

Khurram Noor — Mon, 19 Feb 2018 05:43:04 GMT

Found this query while searching for the Fallback methods. My WLC is 8.0 and i can see that the time for passive fall back is configurable (default 300sec)

Re: WLC RADIUS Server Failover - Passive mode timer

Flavio Miranda — Mon, 19 Feb 2018 09:32:41 GMT

Default is 300 seconds.

-If I helped you somehow, please, rate it as useful.-