• May 22, 2012, 08:55:14 PM
Welcome, Guest. Please login or register. Registration is free.
Did you miss your activation email?

Author Topic: Radius Server Fallback to Local?  (Read 558 times)

0 Members and 1 Guest are viewing this topic.

Offline Alejo_NIN

  • Jr. Member
  • **
  • Posts: 28
Radius Server Fallback to Local?
« on: September 01, 2011, 11:51:47 AM »
guyes,
it's me again!
yay!

well, anyways.
i am having toruble configuring switch to fall back to local password after radius logging failed (either unknown account or server down)
i did the command:
Quote
(config)#radius-server password fallback
but it still didn't work.
in other words, when i try to logging as RO or RW into the switch, it fails because Radius says it doens't exist, which ok, but it should try its local accounts and give Read-Only or Read-Write access in case radius fails, am i wrong?


Offline Michael McNamara

  • Administrator
  • Hero Member
  • *****
  • Posts: 2517
    • Michael McNamara
Re: Radius Server Fallback to Local?
« Reply #1 on: September 01, 2011, 11:29:07 PM »
It will only fallback if the RADIUS server is unreachable, I've tested it on an ERS 8600 and ERS 5520 switches.

You didn't tell us what switch you are working with nor did you tell us what software you are running.

How are you simulating a failed RADIUS server? Is the IP address of the RADIUS server reachable (ping)?

Good Luck!
We've been helping network engineers, system administrators and technology professionals since June 2009.
If you've found this site useful or helpful, please help me spread the word. Link to us in your blog or homepage - Thanks!

Offline brazenhead

  • Sr. Member
  • ****
  • Posts: 120
Re: Radius Server Fallback to Local?
« Reply #2 on: September 15, 2011, 07:22:04 PM »
Like Michael said, it will only fail over if the Radius server is unreachable. Your comment "Radius says it doens't exist" indicates to me that the switch is indeed contacting the Radius server, but it is telling you that the RW or RO user doesn't exist (in radius), which it wouldn't.

Not sure if I added any new info in addition to Michael's response with that ...





Offline Michael McNamara

  • Administrator
  • Hero Member
  • *****
  • Posts: 2517
    • Michael McNamara
Re: Radius Server Fallback to Local?
« Reply #3 on: September 15, 2011, 07:30:18 PM »
Thanks for the reply @brazenhead... I very much appreciate everyone's contribution and input. I've been known to be wrong on many an occasion.

Perhaps @Alejo_NIN could post a follow-up and let us know how he made out?

Cheers!

We've been helping network engineers, system administrators and technology professionals since June 2009.
If you've found this site useful or helpful, please help me spread the word. Link to us in your blog or homepage - Thanks!