cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2017
Views
2
Helpful
2
Replies

ISE Radius Accounting Proxy

joncampo
Cisco Employee
Cisco Employee

May I kindly ask if it is possible for ISE to be a Radius proxy server only for Radius accounting? Thanks in advance

1 Accepted Solution

Accepted Solutions

Jason Kunst
Cisco Employee
Cisco Employee

yes you can point to another RADIUS server for authentication and then still have ISE do the authorization

Please see public documentation: Admin guide

Excerpt

Cisco ISE Acting as a RADIUS Proxy Server

Cisco ISE can function both as a RADIUS server and as a RADIUS proxy server. When it acts as a proxy server, Cisco ISE receives authentication and accounting requests from the network access server (NAS) and forwards them to the external RADIUS server. Cisco ISE accepts the results of the requests and returns them to the NAS.

View solution in original post

2 Replies 2

Jason Kunst
Cisco Employee
Cisco Employee

yes you can point to another RADIUS server for authentication and then still have ISE do the authorization

Please see public documentation: Admin guide

Excerpt

Cisco ISE Acting as a RADIUS Proxy Server

Cisco ISE can function both as a RADIUS server and as a RADIUS proxy server. When it acts as a proxy server, Cisco ISE receives authentication and accounting requests from the network access server (NAS) and forwards them to the external RADIUS server. Cisco ISE accepts the results of the requests and returns them to the NAS.

Hello Jason,

 

Is there any other way to send copy of user-ip matching (accounting) information to another system? Also, I had opened a discussion about it, can you check it for more details?

 

lsending user-ip-matching information from ise to fortigate