After reading
http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps5187/products_feature_guide09186a008017d10c.html
although i didn't understand quite easily and fully the "Reorder on Failure" concept, i
decided to try that using the following config on a 5350 (12.3(1)):
!-----------------------------
aaa group server radius RADIUS-SERVERS
server 1
server 2
deadtime 5
!
radius-server retry method reorder
radius-server transaction max-tries 3
radius-server retransmit 3
radius-server timeout 15
!-----------------------------
I would like your help on the following scenario:
Let's suppose that both radius work fine, so radius 1 is currently being used.
Suddenly radius 1 stops working and a dialup user tries to authenticate.
What will happen next if:
a) radius 2 works fine and radius 1 starts working after 1 sec (my case)
b) radius 2 works fine and radius 1 starts working after 6 mins
c) radius 2 doesn't work too but radius 1 starts working immediately
d) radius 2 doesn't work too and radius 1 starts working after 1 sec
e) radius 2 doesn't work too and radius 1 starts working after 6 mins
I have enabled "debug aaa sg-server-selection" and i'm getting quite a lot of these
messages that worry me:
Jun 23 19:46:11.445: AAA/SG/SERVER_SELECT Server (x.x.x.x:1812,1813) marked dead. Skipping.
Also, what would be the preferred config if i wanted to have radius 1 used mainly and
radius 2 used only (and that for only 5 mins (max)) when radius 1 had problems?
--
***********************************
Chatzithomaoglou Anastasios
Network Design & Operations Center
FORTHnet S.A.
<achatz@forthnet.gr>
***********************************
http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps5187/products_feature_guide09186a008017d10c.html
although i didn't understand quite easily and fully the "Reorder on Failure" concept, i
decided to try that using the following config on a 5350 (12.3(1)):
!-----------------------------
aaa group server radius RADIUS-SERVERS
server 1
server 2
deadtime 5
!
radius-server retry method reorder
radius-server transaction max-tries 3
radius-server retransmit 3
radius-server timeout 15
!-----------------------------
I would like your help on the following scenario:
Let's suppose that both radius work fine, so radius 1 is currently being used.
Suddenly radius 1 stops working and a dialup user tries to authenticate.
What will happen next if:
a) radius 2 works fine and radius 1 starts working after 1 sec (my case)
b) radius 2 works fine and radius 1 starts working after 6 mins
c) radius 2 doesn't work too but radius 1 starts working immediately
d) radius 2 doesn't work too and radius 1 starts working after 1 sec
e) radius 2 doesn't work too and radius 1 starts working after 6 mins
I have enabled "debug aaa sg-server-selection" and i'm getting quite a lot of these
messages that worry me:
Jun 23 19:46:11.445: AAA/SG/SERVER_SELECT Server (x.x.x.x:1812,1813) marked dead. Skipping.
Also, what would be the preferred config if i wanted to have radius 1 used mainly and
radius 2 used only (and that for only 5 mins (max)) when radius 1 had problems?
--
***********************************
Chatzithomaoglou Anastasios
Network Design & Operations Center
FORTHnet S.A.
<achatz@forthnet.gr>
***********************************