Page 1 of 1

RADIUS auth question.

Posted: 18 Jun 2021 13:51
by JustinCCI
Hello,

If there is a better forum area to post this, please let me know.

My understanding is that if you have RADIUS auth enabled and the switch can communicate with the RADIUS server, that it will not use ANY of the onboard database for login, i.e. local admin/switch won't work at all until communication with server is down. Is this the case? I have someone telling me that the local admin account should always work.

Your insight is much appreciated.

Re: RADIUS auth question.

Posted: 20 Jun 2021 07:45
by silvio
you can config more than one server:
aaa authentication ssh RAD1 RAD2 local

If now an unser tries to connect via ssh the first server (RAD1) will be asked. Depending from the answer the user can have access. If the first server is down than the next server will used - but not if the first server is alive and the user at this is missing. If both servers are down than the local database within the switch will used. Means at the end: if the RAD is working the local admin can't use for ssh.
best regards
Silvio