Forum Discussion

Edward_Gastón_S's avatar
Edward_Gastón_S
Icon for Nimbostratus rankNimbostratus
Mar 13, 2019

APM SSL VPN with 2 Radius Token

Hello F5 community,

 

One question, it is possible to have an APM SSL VPN policy, authenticated through active directory and two Radius Tokens servers so that I can use the token code of a radius server to successfully communicate, for example Client ---- -> Active Directory --- AND ---- (Radius1 ---- OR ---- Radius2) --- = Successful VPN

 

BIG-IP Access Policy Manager (APM)
security
  • Yoann_Le_Corvi1's avatar
    Yoann_Le_Corvi1
    Icon for Cumulonimbus rankCumulonimbus
    Mar 14, 2019

    Hi

     

    It should be possible. What criteria would decide whether Radius 1 or Radius 2 would be used ?

     

    For example you could imagine :

     

    1 - AD Auth

     

    2 - AD Query to get the group membership

     

    3 - If Group 1 -> Radius 1 --> Success

     

    4 - If Group 2 -> Radius 2 --> Success

     

    Of course the criteria can be pretty much anything in your case. And you could cascade the Radius. If Radius 1 fail, try Radius 2...

     

    Yoann