I configure 2 radius on the switch and when 1st radius dead then the client will authenticate to 2nd radius but this request use MAB and not dot1x. In my mind maybe the switch have short dot1.x timer so the authentication will switch to MAB even radius was not failovered. Am i right, or someone know how we can keep dot1.x when fail over happen?
interface GigabitEthernet1/0/3
switchport access vlan 40
switchport mode access
switchport voice vlan 38
authentication event server dead action authorize vlan 32
authentication event server alive action reinitialize
authentication host-mode multi-domain
authentication order dot1x mab
authentication port-control auto
mab
dot1x pae authenticator
spanning-tree portfast
end
