Skip to main content
Contributor
December 30, 2021

Technical Tip : Redundant radius server for Radius administrator users

  • December 30, 2021
  • 0 replies
  • 682 views
Description This article describes the Redundant radius server  configuration for Radius administrator users.
Scope FortiGate.
Solution

As well as know configuring server redundancy is the best practice in case of remote authentication(especially for the administrator users)

Check the below-mentioned article, there are Two radius servers configured.


one is acting as Primary while the other one is Secondary.


akumarr_0-1640878090360.png


There is also remote administrator configured, check below.

 

akumarr_1-1640878211427.png


So whenever Admin users tries to login he will authenticated through primary server and if the primary server is down then authentication will be handled by the secondary server.

Note.

The user must be a part of both servers.

Check the below-mentioned sniffer.



Sniffer 1 >>> Sucessfull authentication(Through primary server).


filters=[(host 172.31.133.140 or host 10.133.5.120) and port 1812 ]
14.321084 port2 out 172.31.133.115.15201 -> 172.31.133.140.1812: udp 111
14.337001 port2 in 172.31.133.140.1812 -> 172.31.133.115.15201: udp 20


Sniffer 2 >>> Sucessfull authentication(Through primary server) when primary is down.

akumarr_2-1640878889359.png

 


16.139606 port5 out 10.133.5.115.1429 -> 10.133.5.120.1812: udp 111
16.149698 port5 in 10.133.5.120.1812 -> 10.133.5.115.1429: udp 20


From the output,  traffic is going through secondary one.