topic Re: Servers Radius - Contingency in SASE and Remote Access

Servers Radius - Contingency

Americo_two — Thu, 04 Feb 2021 16:24:32 GMT

Hi Everyone,

Today we are using RA VPN with MFA on azure, in short, I have a RADIUS server configured in my SMS and all authentication request are sent to this server, my question is, today we have just one radius server and need to implement contingency, is it possible configure both servers on Check Point to send authentication request for both or is necessary configure a cluster on radius server?

Re: Servers Radius - Contingency

PhoneBoy — Fri, 05 Feb 2021 02:34:36 GMT

We have a RADIUS Group object for this purpose.

Re: Servers Radius - Contingency

Americo_two — Fri, 05 Feb 2021 15:17:05 GMT

Hi PhoneBoy,

As my radius is working at this moment, do you know if is necessary just create a radius group and add all radius server inside this group?

Today my SMS is configured as pictures attached.

Re: Servers Radius - Contingency

PhoneBoy — Fri, 05 Feb 2021 18:21:00 GMT

That's the basic idea, yes (and use that group in place of the individual RADIUS server).
Just be sure you create it as the specific RADIUS group type and not a regular object group.