ACS 3.2 Distriburion Proxy Problem

[hoodbe]

I am using Cisco ACS 3.2 for Windows and am unable to force proxy distribution of authentication requests. I have configured for a @domain.com suffix (have tried other delimiters as well) to strip the suffix and forward to another RADIUS server. Problem is that all authentication attempts show as an unrecognized username and are rejected without ever making it to the second RADIUS server. The second radius server has the ACS server configured as a AAA client.

Any ideas?

[r.state]

Cisco Secure ACS employs character strings defined by the administrator to determine whether an authentication request should be processed locally or forwarded, and to where. Have you configured the character strings? -

The "default" entry that exiss in the Distribution table, refers to the local database. Create a new entry in the Dist table for remote AAA clients.