Command of the Day

Reply
Contributor I
Posts: 90
Registered: ‎08-03-2009

Mutiple radius servers in a group

Customer has TWO different Radius Servers where the users are spread on these radius servers, they are not in synchronized and have different sets of users.

My question is if I add both of them in single radius group can the authentication request will be passed on to the second server if the user account is not available in the first server.

Or only when the first server is not reachable/available it will pass it to the second server.
Guru Elite
Posts: 20,560
Registered: ‎03-29-2007

Fail-through

In the server group, there is a fail-through option. If this is off, the first server will be always queried. if the first server does not respond, it will be taken out of service and the second server will be used.

If fail-through is ON, the first server will be queried. If we get a reject from the first server, the second server will be queried. That is the option you need.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba Employee
Posts: 664
Registered: ‎04-15-2009

Re: Mutiple radius servers in a group

Make sure the "Fail through" button is checked (enabled) in the server group and the controller will try the second server if the first does not respond or responds with a reject. You may have to enable termination on the controller to make this work.

Check out page 262 of the 3.4.2 users guide. It explains this feature in detail.
Search Airheads
Showing results for 
Search instead for 
Did you mean: