08-24-2006 07:52 AM - edited 03-03-2019 01:45 PM
I have several routers with backup links and we use Radius for authentication into those routers. It seems like the Radius uses the primary serial link to connect to the Radius server. When the link fails and it switches over to the backup I can't login with Radius. Is there any way to tell it to use the Lan Port IP?
Solved! Go to Solution.
08-24-2006 07:55 AM
Hello,
Check the following command:
radius source-interface "type/mod"
bye
FCS
Please rate me if I helped.
08-24-2006 07:55 AM
Hello,
Check the following command:
radius source-interface "type/mod"
bye
FCS
Please rate me if I helped.
08-24-2006 08:26 AM
On the router I checked the syntax is actually ip radius source-interface
You could point it at the LAN interface if you desire to. Frequently it is considered best practice to point it to a lookback interface (if the router has a loopback interface).
HTH
Rick
08-24-2006 12:04 PM
Thanks I found that command as well. Can you elaborate more on the loopback interface? I don't have one setup.
08-24-2006 12:37 PM
Jobe
A loopback interface is a virtual interface that can be configured on the router. With normal interfaces there could be a problem in the network or the cable could be unplugged and the interface goes down. With loopback interfaces you have removed the physical dependencies. So loopback interfaces are more stable than physical interfaces.
There are many functions on the router for which loopback interfaces are useful. As your question raises it may be beneficial to use the loopback as the source for radius requests. The loopback can also be used as the source address for other things including syslog, telnet, tftp, ftp, ntp. This means that it eliminates ambiguity for those applications. No matter which interface carried the traffic it always appears to be from the same source.
There are other situations in which it is helpful to have a loopback interface. Many of the routing protocols may use a loopback interface as its router ID for example.
HTH
Rick
08-25-2006 04:10 AM
Thanks for Clarifying Rick. This seems like the better way to go for those types of services.
08-24-2006 12:03 PM
Thanks you sent me down the right path. Here's the command.
ip radius source-interface subinterface-name
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide