Re: RADIUS Authentication

right you are sir.

thank you.

On Thu, Apr 18, 2013 at 12:10 PM, Jay McMickle <jay.mcmickle_at_yahoo.com>wrote:

> On this forum, ACS should be mentioned (especially since this is an IE
> forum).
>
> Geographically dispersed RADIUS or TACACS is highly recommended.
>
> You didn't mention what it's for- dot1x or device administration? Either
> way, they both work, but you'll get more features (depending upon what you
> are using it for) with TACACS and AD integration. Make sure you use LOCAL
> at the end of your aaa statements in your configs as well.
>
> Regards,
> Jay McMickle CCIE #35355
> Sent from my iPhone
>
> On Apr 18, 2013, at 11:59 AM, Eduardo Vazquez <evazquez_at_gmail.com> wrote:
>
> > You can set up multiple RADIUS servers, but you must replicate your users
> > some how on the servers. If you do RADIUS on windows, if the servers are
> > part of the domain, they should be able to query their local domain
> > controller for the information.
> >
> >
> > On Thu, Apr 18, 2013 at 11:54 AM, Cisco Fanatic
> > <ebay_products_at_hotmail.com>wrote:
> >
> >> Is RADIUS recommended as an authentication mechanism when you have HQ
> and
> >> multiple remote sites?
> >>
> >> If sites are geographically dispersed does it means that the remote user
> >> have
> >> to authenciate itself to a RADIUS server in HQ? Will this not add to
> delays
> >> over the WAN? What if we lose the server in HQ?
> >>
> >> -Yuri
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Apr 18 2013 - 12:23:25 ART