I assume you are using the PIX to terminate a VPN tunnel? If that's the
case, then you can setup local accounts for this purpose. Look into the
"vpdn ..." commands. You didn't mention the PIX OS version so I'll assume
5.x at least.
By the way, Microsoft offers a free (yes, I said FREE!) RADIUS server. It
comes as part of the IIS option pack for NT 4.0. I don't know where it's
setup on Win2k but I'm sure it's there somewhere as well. With this, you
could setup a backup RADIUS server.
---
Rik Guyler
-----Original Message-----
From: Jim Bond [mailto:[EMAIL PROTECTED]]
Sent: Saturday, July 07, 2001 4:40 PM
To: [EMAIL PROTECTED]
Subject: PIX authentication [7:11265]
Hello,
I'm trying to set up PIX for a client. I would use
RADIUS as authentication. The concern I have is if
RADIUS server is down, all authentication requests
will be denied. On routers, I can create a local
account as last resort, something like "aaa
authentication default radius local", but on PIX,
there is no "local" option, how do I do then?
By the way, my client has only 1 RADIUS sever.
Thanks in advance.
Jim
__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11291&t=11265
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
