AAA configuration at C9800

[Leftz]

Hello, In below AAA config, there are two ISE server 1 and 2 as one group. We like ISE-1 to be primary and ISE-2 secondary. But I cannot see any option for it on this page. Is this possible?  Anyone can share the experience? Thank you

[Mark Elsen]

 - I think it will behave like that per default , you may verify this by examining the logs on both ISE servers , 

 M.

[Leftz]

@Mark Elsen thanks for your reply. what do you mean with "per default"? I want ISE-1 is configured as primary node, Is this possible? 

[Mark Elsen]

 - If you go to the AAA Advanced tab , -> Global Config and leave Radius Server Load Balance disabled, then they will probably be used in the configured order. Also have a look at Radius Fallback , for settings related to dead server detection ,

 M.

[Leftz]

disabling Radius Server Load Balance might just disable load balance, but it might not define primary one, right? or we can say the first one is primary. The reason that we want ISE-1 as primary is because this node is local, so it would be fast. Thanks

[Mark Elsen]

         >...or we can say the first one is primary.
               - Confirmed , 

 M.

[Sandeep Choudhary]

Hi,

in IOS version  this feature was available but here its different. you basically define the servers and create a server group. This is not AireOS, so there is no primary/secondary/tertiary setting.

Regards

Dont forget to rate helpful posts

[Gaurav Kansal]

Hi zshowip

You can create a server groups in WLC and there you can make ISE1 and ISE 2 Primary, secondary and call that group in WLAN.

Configuration > Security > AAA>Server/Server Group

Please reply if its helpful

Thanks