Forum Discussion
F5 Radius Authentication for admins
- Dec 22, 2014
I want admin user authentication should be done locally and rest of users should through radius. Is that doable?
If a remote authentication method is specified for system user accounts, the BIG-IP local database still authenticates the system maintenance accounts mentioned above. This ensures that if the remote authentication device is unreachable, the system maintenance accounts can still access the BIG-IP system.
sol12173: Overview of BIG-IP administrative access controls
https://support.f5.com/kb/en-us/solutions/public/12000/100/sol12173.htmlIf user are on both local and radius and radius server is unreachable then user would be able to authenticate locally?
no
Also for permissions, can I use local user role? I mean radius is used only for authentication and for permissions local role group.
yes (radius server is used for authentication but local user setting is used for authorization).
I want admin user authentication should be done locally and rest of users should through radius. Is that doable?
If a remote authentication method is specified for system user accounts, the BIG-IP local database still authenticates the system maintenance accounts mentioned above. This ensures that if the remote authentication device is unreachable, the system maintenance accounts can still access the BIG-IP system.
sol12173: Overview of BIG-IP administrative access controls
https://support.f5.com/kb/en-us/solutions/public/12000/100/sol12173.htmlIf user are on both local and radius and radius server is unreachable then user would be able to authenticate locally?
no
Also for permissions, can I use local user role? I mean radius is used only for authentication and for permissions local role group.
yes (radius server is used for authentication but local user setting is used for authorization).
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com