802.1x - Authenticating users from two domains on one switch

[thomuff]

Hi

Trying to figure out if there is a way to have a switch authenticate devices from two different domains

For example   Computer A is in Domain A  Computer B is Domain B

Computer A is connected to f0/1 computer B is connected to F0/2

I am thinking that i have to configure multiple Radius server entries  One for domain A and one for domain B and reduce the timeout if possible

Any ideas or solutions?

Thank you for your help..

[Marvin Rhoads]

What's your RADIUS server?

ISE 1.3 allows you to join it to multiple domains.

Even with ISE 1.2, you could join one AD domain and also use the identities from a second one via LDAP.

Multiple RADIUS server entries won't normally try the second one as long as the primary is responsive - a failed authentication counts as a legitimate response. You can setup round robin or least outstanding methods but that still doesn't give you the "check both to see if one gives me a good authentication" result.