- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-11-2020 03:08 AM
Hi,
We have a two radius groups configured on our switch. The first one is live and it uses the source ip address 192.168.240.10 to communicate with a local ISE environment. The radius source interface hasnt been configured anywhere, the switch has just picked that interface. The second radius group (not live at the moment) needs to use a different source IP address (to the default 192.168.240.10) as it is connecting to a separate remote ISE environment and we cant route the 192 address.
- Firstly, is this the config in bold that will enable that group to use a different radius IP? The vlan in question has a routable address.
aaa group server radius remoteISE12
server name remoteISE01
server name remoteISE02
ip radius source-interface vlan vlan-name - I want to check that manually setting the source address for one group wont affect the other live group. I feel like it shouldnt but as this is a live environment I would like to be sure.
Many thanks,
Paddy
Solved! Go to Solution.
- Labels:
-
AAA
-
Identity Services Engine (ISE)
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-11-2020 06:13 AM
-It wont affect the other group. The only way something could possibly cause an issue is if you globally configured a different radius source-interface. As long as they are configured to be unique under each group you are fine.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-11-2020 03:42 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-11-2020 06:13 AM
-It wont affect the other group. The only way something could possibly cause an issue is if you globally configured a different radius source-interface. As long as they are configured to be unique under each group you are fine.
