Security

I just brought a new local controller on line.  the master is at a different location and obviously hold the radius server config.  on the gui there is a nas-ip field that has the master's ip address should i just add the local's ip address there?  our NPS server is already configured to receive auth from the local's ip.

Thanks,

Rafael

---

@r.ertel wrote:

I just brought a new local controller on line.  the master is at a different location and obviously hold the radius server config.  on the gui there is a nas-ip field that has the master's ip address should i just add the local's ip address there?  our NPS server is already configured to receive auth from the local's ip.

 

Thanks,

 

Rafael

---

You should be fine at the local without doing this.  Go to the Diagnostics tab on the local and go to AAA test server.  Do a test authentication from the local and see if it works.

Yea, it does not work.  Are you thinking it is a server side issue?  So the Master's radius server profile does not need any further config when bringing a new local online?

Thanks again,

Rafael

If you have a timeout look in the radius server's log to see if it is getting traffic from an unknown nas.

Yup.  Timing out.  I'll have to hit up my systems guy.

Rafael

In Configuration> Security> Authentication> Advanced, you should be able to set the VLAN that the authentication comes from on the local controller.

there (on the local)  i see a NAS IP (it is of the master) and a Source address option which is "none" right now.  again i am talking about on the local.  

rafael

that config is identical on the Master

You will only really know when your Radius Server administrator comes back, so you can see the logs.  Anything else would be guessing, unfortunately.

I can appreciate that.

Thanks,

Rafael

Update,  my error has changed from a timeout to auth failed.  i think we are close.

Rafael

Got it working!  Thanks.

rafael

I was trying to hit a radius server that had not yet been conf'ed correctly.