Forum Discussion

Domai's avatar
Domai
Icon for Altostratus rankAltostratus
Feb 12, 2015

AD auth + F5

Hello, I have a question regarding MS AD bind with F5. I setup the integration with out MS AD and is working fine. The question I have is ...Is there a way to specify more than one AD server (Host IP) to provide redundancy? If the server that I am pointing to goes down for any reason then users will not be able to authenticate correct?

 

active directory
BIG-IP Access Policy Manager (APM)
ldap
management
security

2 Replies

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Feb 12, 2015

    I don't believe there is currently a way to specify more than one server for this. What you can do is point it at a load balanced virtual IP.

     

  • Michael_Jenkins's avatar
    Michael_Jenkins
    Icon for Cirrostratus rankCirrostratus
    Feb 12, 2015

    You're referring to setting up auth for external users to log into the BIG IP, right? We haven't done this ourselves, but have you tried setting up a VIP that you could use to forward the traffic to a pool of AD servers, and set the host to that VIP's IP?