Secondary Radius Server in fortimail?

[mhabiballa_]

Hi
Is there any way to add a secondary radius server on Fortimail 400F running code 7.2.6, for Admin authentication?

Thanks in advance. 

[AEK]

Hi

Did you try from CLI?

config profile authentication radius
  edit rad1

    ...

  next

  edit rad2
    ...
  next
end

I didn't test it but I think it should work.

[AEK]

BTW you can add multiple RADIUS servers on FML WebUI as well:

But if you mean by secondary RADIUS server a backup RADIUS server (in case 1st doesn't respond the second is requested), then I don't find such possibility in FML CLI, that means it is not implemented (yet).

[mhabiballa_]

Hi,
Thanks for the input.
So, this is the way of doing it! It's different from other fortinet products where we can add 2 rad_srv (primary & backup) in a single rad profile.
However, if I go for this approach, the remote user will be assigned to one rad profile only!. How to overcome this issue?

[AEK]

In this case I guess a solution is to use a load balancer, or a RADIUS cluster in A-P HA.