Forum Discussion

touchring_93818's avatar
touchring_93818
Icon for Nimbostratus rankNimbostratus
Jul 21, 2009

Possible to first authenticate against RADIUS, and if no response, failover to AD.

Hi, my user is using Firepass SSL, and I would like to find out if it is possible to configure Firepass SSL to authenticate against RADIUS, and if the RADIUS Server does not respond or is down, failover to AD. Thanks.
BIG-IP Access Policy Manager (APM)
remote access
security
  • psilvas's avatar
    psilvas
    Icon for Altostratus rankAltostratus
    Aug 03, 2009
    in Users>Groups>Dynamic Group Mapping you should be able to create a Group Mapping sequence (fallback to authenticate against), then in Master Group Mapping Table, map the RADIUS/AD group to a FirePass group. hope that helps.

     

     

    ps
  • Noppadon_Panyar's avatar
    Noppadon_Panyar
    Icon for Nimbostratus rankNimbostratus
    Aug 31, 2009
    how about if the first radius doesn't down but it doesn't has that user on its database, then firepass try requesting on second radius server? is it possible? please advice.