Sending authentication-requests to multiple radius-servers

Alan DeKok aland at deployingradius.com
Wed Nov 28 16:07:19 CET 2012


Stefan Kuegler wrote:
> Is it possible to send an authentication-request from a client to
> multiple servers simultaneously ?

  Not really, no.

> We now authenticate with HMAC-based One Time Password Token (aka
> event-based token) from a Cisco ASA via radius to only one
> freeradius-server. But we want to establish a second authentication
> server for failover reasons.

  That's different.

> When using event based tokens, it's absolute necessary that every server
> receives the same authentication request simultaneously from the client
> to trigger the next "event" on the server side.

  Well.. database synchronization really isn't a RADIUS problem.  You're
better off fixing the token system so that it works.

  Alan DeKok.


More information about the Freeradius-Users mailing list