About christopher.wilson

christopher.wilson · 02-25-2020

Scenario: We've got a functioning AnyConnect setup, which also uses DUO for multi-factor authentication. In the near future, I'll need to take down the RADIUS server that's currently being used for AnyConnect AD authentications. My thought was to ...

christopher.wilson · 03-05-2020

Thank you Cristian for the link. I didn't understand the traffic flow. I thought that AnyConnect authentications were first hitting the primary RADIUS server. So I was playing with the AAA server group related to that initial RADIUS server. Turns ...

christopher.wilson · 02-26-2020

When I stop the NPS service, the ASA still reports the status as "ACTIVE." When I disconnect the NIC on the RADIUS/NPS server, the ASA still reports the status as "ACTIVE." So unfortunately that doesn't look like a good way to test. I should also m...

christopher.wilson · 02-25-2020

Thanks for the suggestion. While the NPS service was down, I ran the "show aaa-server protocol radius" command, but the output is very strange. It's showing almost zero authentication requests with the primary RADIUS server, with the last transacti...

Member Since	‎02-25-2020 12:44 PM
Date Last Visited	‎08-12-2020 10:45 PM
Posts	4

User Statistics

User Activity

AnyConnect with multiple radius servers (and DUO)

Re: AnyConnect with multiple radius servers (and DUO)

Re: AnyConnect with multiple radius servers (and DUO)

Re: AnyConnect with multiple radius servers (and DUO)