Forum Discussion
F5 Radius Authentication for admins
- Dec 22, 2014
I want admin user authentication should be done locally and rest of users should through radius. Is that doable?
If a remote authentication method is specified for system user accounts, the BIG-IP local database still authenticates the system maintenance accounts mentioned above. This ensures that if the remote authentication device is unreachable, the system maintenance accounts can still access the BIG-IP system.
sol12173: Overview of BIG-IP administrative access controls
https://support.f5.com/kb/en-us/solutions/public/12000/100/sol12173.htmlIf user are on both local and radius and radius server is unreachable then user would be able to authenticate locally?
no
Also for permissions, can I use local user role? I mean radius is used only for authentication and for permissions local role group.
yes (radius server is used for authentication but local user setting is used for authorization).
I want admin user authentication should be done locally and rest of users should through radius. Is that doable?
If a remote authentication method is specified for system user accounts, the BIG-IP local database still authenticates the system maintenance accounts mentioned above. This ensures that if the remote authentication device is unreachable, the system maintenance accounts can still access the BIG-IP system.
sol12173: Overview of BIG-IP administrative access controls
https://support.f5.com/kb/en-us/solutions/public/12000/100/sol12173.htmlIf user are on both local and radius and radius server is unreachable then user would be able to authenticate locally?
no
Also for permissions, can I use local user role? I mean radius is used only for authentication and for permissions local role group.
yes (radius server is used for authentication but local user setting is used for authorization).
- ghost-rider_124Dec 23, 2014NimbostratusThank you
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com