1

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius)

This is what i have currently

aaa-server SecureID protocol radius
aaa-server SecureID (inside) host 10.1.1.1
 key *****
 authentication-port 1812
 accounting-port 1813
...
...
tunnel-group ANYCONNECT-PROFILE type remote-access
tunnel-group ANYCONNECT-PROFILE general-attributes
 address-pool ANYCONNECT-POOL
 authentication-server-group SecureID
 default-group-policy GroupPolicy_ANYCONNECT-PROFILE
  • 2
    The same way you added the first one. – Ricky Beam Oct 13 '17 at 3:55
2

You can add the second server to the "SecureID" Server Group as well:

aaa-server SecureID (inside) host 10.1.1.2
key *****
authentication-port 1812
accounting-port 1813

Because both AAA Server in the same Server Group (server_tag) there automaticly used for the tunnel-group.

See this example from the Cisco CLI Guide: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/aaa_servers.html#27362

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.