Is it possible to send Radius accounting packets with two different servers?

Hello experts!

I have dilemma I send info Radius accounting on two different servers for authentication of the dot1x. Here are the relevent config. However the switch just to send a copy on the first server in the server group...

RADIUS AAA server Acct group
ACCT-port of the server 172.17.1.1 auth-port 1812 1813
ACCT-port of the server 172.17.1.2 auth-port 1812 1813

accounting dot1x default start-stop broadcast group AAA Acct

RADIUS-server host 172.17.1.1 auth-port 1812 acct-port 1813 key xxxxxx
RADIUS-server host 172.17.1.2 auth-port 1812 acct-port 1813 key xxxxxx

Is it possible to send two copies of two different servers? I tried the key word 'issue' in the aaa accounting command, but it does make a difference. What is doing? I can't find it in the manual...

Thank you!

Difan

Difan,

You must create two aaa server groups to operate. Allows the sending of accounting records to multiple AAA servers.  At the same time returns accounting records the first server in each group. If the first server is unavailable, the failover occurs using servers defined within this group.

Accounting AAA broadcast configuration
The following example shows the turn on broadcast accounting using the aaa accounting global command:

RADIUS AAA server group isp
Server 1.0.0.1
Server 1.0.0.2

AAA isp_customer radius server group
Server 3.0.0.1

AAA accounting network default start-stop broadcast group isp group isp_customer

host server RADIUS 1.0.0.1
host server RADIUS 1.0.0.2
Server RADIUS key key1
RADIUS-server host 3.0.0.1 key2 keys

The broadcast keyword causes the start and stop accounting for dot1x connections to be sent simultaneously to the 1.0.0.1 group isp server and Server 3.0.0.1 in the isp_customer group. If 1.0.0.1 is unavailable, Server failover 1.0.0.2 occurs. If the 3.0.0.1 server is unavailable, no failover occurs because backup servers are not configured for the isp_customer group.

Kind regards

~ JG

Note the useful messages

Tags: Cisco Security

Similar Questions

  • How to associate the same contact with two different accounts to import

    Hello

    (1) I want to associate the same contact (ex: person) to two different accounts (account A and account B) import.

    I tried with the Unique ID from outside Contact but it is accidental and in the end, I am able to associate this Contact with a single account.



    (2) I also can't records to import custom object with the same name through the import process.



    Could someone advice on the same.

    With regard to your questions:

    (1) currently, it is not possible using the Import Wizard. However, it could be done using web services.
    (2) the name must be different.

  • Is it possible to create an animated gif with a different hotspot/link on each State?

    Hello! I was unable to find the answer to my question by searching, sorry if this has been discussed already.

    I'm doing a gif animated which is actually a small slideshow with a different link on each slide (or State, as are called Fireworks). But it doesn't seem to let me use a hotspot for all this, even if I insert in the layer instead of in the State. I tried to use slices instead of hot spots, and it does the same thing.

    Is this possible?

    No, you can not do this. It is not a question of fireworks, just the way work GIF animation. You will need to use Flash or Flash Catalyst for this type of functionality.

  • Is it possible to send an image file with PDF form?

    Hello

    I know that Acrobat does not provide a ground for the filing of the image file.

    If there are workarounds for this problem?

    I found the suggestions about the place an icon of the button image:

    event.target.buttonImportIcon ();

    but I do not understand is it possible to present the image to the server (reader supports PDF only).

    All advice?

    Yury

    If an image is selected as the icon of a button, it will submit when the file is submitted, but extract in a separate file is delicate.

    Another option is to attach the image file using the annotation tool attach a file, in which case it won't be visible on the page but will still be sent with the file and will be much easier to extract on your end.

  • RADIUS accounting report

    Hello

    I would like to know if is possible annex a Radius accounting report and automatically export GBA version 5.4 5.3.or?

    TKS,

    Daniel Stefani

    Scheduled reports is a characteristic pledged to add in ACS 5.5

  • 13 Alienware with two 512 SSD's in RAID0 Possible?

    I think to buy an Alienware 13, but I have a question I can not anwer myself by using the manual, site etc.

    Is it possible to operate the 13 Alienware with two 512 SSD in RAID0 at full speed.

    Service Manual, I discovered, there is a drive carrier with two slots/connectors of M2, but it does not say that the two connectors are available at the same time at full speed. (I hope, that he supports full speed like the Alienware M14xR2 no I have where the Bay-DVD works on 3gbs rather 6gbp)
    Also, the "SATA Operation" option is available in the BIOS but it only States that:

    To configure the mode of operation of the integrated SATA hard drive controller. Default: AHCI

    So I'm not sure that it is a 'RAID' option available...

    Maybe someone could check its BIOS...

    Also, anyone know if there is some new laptops alienware coming this year?

    Thank you...

    The two slots m2 work SATA III and at the same time, however; You can't RAID them. 13 does not RAID support.

  • Possible to define strategies of OAM configuration on the same site on two different

    Is it possible to define strategies of OAM configuration on the same site on two different servers?

    One of the sites to have anonymous access but it to be protected. How to set up a policy without it automatically applies to all Web sites that match regardless of the host.

    How to differentiate the two OAM sites so that I can apply security different strategies for each of them?

    Thank you.

    You can refer to this [recent thread | http://forums.oracle.com/forums/thread.jspa?threadID=878094&tstart=0].

    Also, if one of the sites requires anonymous access for all the content and it's not going to change in the foreseeable future, just don't install/activate webgate on that.

    -Vinod

  • Is it possible to send money directly to the bank account of the friend using apple pay?

    I think that I heard that it will soon be possible to send money directly from my bank account to bank account a friend with us using apple two pay.

    Is this true? And if it is, when can we do this? Or is this already available?

    Thank you!

    No, until Apple made the announcement, no one knows.

  • After Update 1.2 ISE, I get "5413 RADIUS account request declined."

    Hello

    I have an installation of the node two admin at ISE. I installed one of my two knots ISE Admin to Version 1.2. I still have one of my admin to 1.1.4 nodes. When I disable my Version 1.1.4 node and allow wireless authentication be handled by the node to Version 1.2, I get the message... "Fallen of 5413 RADIUS account request". Meanwhile, none of my wireless edge devices can on the network. When I reactivate my 1.1.4 node my wireless devices are allowed on the network.

    I am currently using ISE to authenticate a wireless connection.

    I also get the reason for the failure. "RADIUS Accounting 11038 request header contains invalid authentication field".

    Any ideas?

    Bob

    5413 RADIUS account request has perhaps dropped because the session was active on ISE1 and is now sending messages to update to ISE2. Also, check your shared secret RADIUS is on the servers of the ISE and wlc. I would try the WLC connection for the compensation test user when switching.  Just turn wireless turn against it.  In addition, you use PEAP-MSChapv2 or EAP - TLS to authenticate the clients.  What type of certificate is present, public or private?

  • Is it possible to send an email to everyone in my address book WITHOUT typing/select each address individually?

    My old e-mail address will be aborted and I need to tell everyone in my address book of Mozilla Thunderbird. Is it possible to send an email to everyone in my address book WITHOUT typing/select each address individually?

    Hello zmerill
    Yes it is possible and simple to do.
    -In the composition of the TB window, display on the left address books
    -Select the address book you
    -Select normally the first contact (left click)
    -by pressing the SHIFT key, select the last contact (-> all selected)
    -just below the last contact, use the button you want.

    In an address book, it is also possible to create a mailing list.

    Stone

  • is it possible to send a true "to-do list"

    is it possible to send a real ✅✅, verifiable "to-do list" or a right 'shopping list' of reminders app so a recipient can get a shopping list to, to-do - list and check it off as they fill?

    You could share a list with them: Open reminders > make a new list or tap the list you want to share > tap Edit > Tap share > add a person. -AJ

    iCloud: share a recall list

  • Is it possible to send someone the firefox app?

    Hello
    My nephew has a laptop with vista on it, and until recently it was working fine, however I discovered that he had no anti virus and now IE won't load so it cannot access the internet. Is it possible to send the request for firefox to my computer? Have since added an anti virus and reinstalled IE without success.

    This has happened

    Don't know how many times

    You can put the Firefox Installer on a USB key, if that person is close enough to get to her.

    You can also include on this handle malware scanners to do a scan on that computer.

    You must use all of the programs, because each detect different malware.
    Make sure that you update each program to get the latest version of the database.

    http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
    http://www.superantispyware.com/ - SuperAntispyware
    http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
    http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
    http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page

    See also 'Spyware on Windows': http://kb.mozillazine.org/Popups_not_blocked and what to do when searches take you on the wrong search site

  • Is it possible to delete an account off Xbox 360 without deleting the whole account?

    Original title: those of Xbox and Xbox 360

    Is it possible to delete an account off Xbox 360 without deleting the whole account? I want to just that this account off certain Xbox

    Hello

    Your Question is beyond the scope of this community...

    I suggest that repost you in the Xbox Forums.

    "Xbox a Preview program FAQ.

    http://support.Xbox.com/en-us/Xbox-one/system/Xbox-update-preview-FAQ

    'Home'

    http://forums.Xbox.com/

    "Xbox forums.

    http://forums.Xbox.com/xbox_forums/general_discussion/f/3817.aspx

    _________________________________________________

    "Xbox Forums directory.

    http://www.Xbox.com/en-us/forums

    General

    Material & Discussion Services

    Xbox support
    Agent hours: M - F 09:00-17:00 PT

    Law enforcement forums

    Technical support of Xbox Live rewards
    Xbox Live rewards Squad hours: M - F 09:00-17: 00 PST

    See you soon.

  • Is it possible to send several emails without all the names come in?:

    Is it possible to send multiple mails without all the names come in?:

    Thank you

    These forums are for MS programs, and your Hotmail should ask here for the best help.
     
    Windows Live Solution Center Hotmail Forum
    http://windowslivehelp.com/forums.aspx?ProductID=1
  • Is it possible to send an MMS from your computer to your cell phone?

    I sent a photo that I had taken on my mobile phone to my computer to save in my pictures folder.  Subsequently, I have deleted the pic of my cell.  Is it possible to send the photo to my cell?

    Hi Leela McLane,

    You can transfer the file in a similar way, how you have transferred the file to the phone to your computer.

    See the following link for more information.

    To copy a file or folder in Windows XP

Maybe you are looking for