cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2401
Views
100
Helpful
16
Replies

ASAv Can authentication with more Radius server ?

jewfcb001
Level 4
Level 4

Hi All ,

 

I would like to know ASAv can authentication with more Radius server in VPN Tunnel ?  

In configuration below. If I have 2 radius group on ASAv and 2 tunnel / group-policy . can i separate 

radius group depend on tunnel-group or not ? 

 

Example Configuration. 

Configuration on  ASAv 

aaa-server ISE protocol radius

aaa-server ISE  (INTERNAL) host 1.1.1.1

 key *****

 

aaa-server ISE-2 protocol radius

aaa-server ISE-2  (INTERNAL) host 2.2.2.2

 key *****

 

group-policy TEST attributes

 group-lock value TEST

 

tunnel-group TEST type remote-access

tunnel-group TEST general-attributes

 authentication-server-group ISE

 accounting-server-group ISE

 

group-policy TEST-2 attributes

 group-lock value TEST-2

 

tunnel-group TEST-2 type remote-access

tunnel-group TEST-2 general-attributes

 authentication-server-group ISE-2

 accounting-server-group ISE-2

 

Thank you .

 

16 Replies 16

yes. correct you can do that.

please do not forget to rate.

@jewfcb001 yes, you can have many tunnel-groups that use many RADIUS server groups.

Review Cisco Networking for a $25 gift card