You can set up multiple RADIUS or TACACS servers so that if one is down it
will try the other.
Allen
----- Original Message -----
From: "Rik Guyler"
To:
Sent: Saturday, July 07, 2001 9:58 PM
Subject: RE: PIX authentication [7:11265]
> I assume you are using the PIX to terminate a VPN tunnel? If that's the
> case, then you can setup local accounts for this purpose. Look into the
> "vpdn ..." commands. You didn't mention the PIX OS version so I'll assume
> 5.x at least.
>
> By the way, Microsoft offers a free (yes, I said FREE!) RADIUS server. It
> comes as part of the IIS option pack for NT 4.0. I don't know where it's
> setup on Win2k but I'm sure it's there somewhere as well. With this, you
> could setup a backup RADIUS server.
>
> ---
> Rik Guyler
>
> -----Original Message-----
> From: Jim Bond [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, July 07, 2001 4:40 PM
> To: [EMAIL PROTECTED]
> Subject: PIX authentication [7:11265]
>
>
> Hello,
>
> I'm trying to set up PIX for a client. I would use
> RADIUS as authentication. The concern I have is if
> RADIUS server is down, all authentication requests
> will be denied. On routers, I can create a local
> account as last resort, something like "aaa
> authentication default radius local", but on PIX,
> there is no "local" option, how do I do then?
>
> By the way, my client has only 1 RADIUS sever.
>
> Thanks in advance.
>
> Jim
>
> __________________________________________________
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11455&t=11265
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
