Forum Discussion
dirken
Nimbostratus
Jun 15, 2016Howto change source adress for different radius requests to same radius server
I am using APM as reverse proxy for different access methods, e. g. OWA, SSL-VPN etc., always using the same Radius server (Cisco ISE). I want the Radius server to react differently to my auth reques...
Yann_Desmarest
Cirrus
Jun 15, 2016Hi,
You can define multiple Radius Virtual Servers and add a different Source NAT for each VS. Then, you apply different a VS IPs to each Radius configuration.
- dirkenJun 16, 2016
Nimbostratus
Hi Yann, this is not a VS for a Radius but a AAA item in APM, to authenticate users accessing completely different ressources. So no VS, no such thing as a NAT pool. From the F5 point of view, this is self-initiated traffic. - Yann_DesmarestJun 16, 2016
Cirrus
Hi, As I told you, you can setup a Virtual Server and try to configure your AAA object with the IP address of the Virtual Server. - dirkenJun 30, 2016
Nimbostratus
Hi, I tried, but it seems that addressing a virtual server from inside the AAA object does not work with route domains, which is my case. Found some hints in this direction on the web. Could solve the problem with a redesign of the Radius/RSA infrastructure, however. Cheers Dirk - Yann_DesmarestJun 30, 2016
Cirrus
As far as I remember, using a route domain other than default is not supported with APM for object configuration
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects