getting a possibility to check PIN + OTP on AA and once this is not accepting / valid fowarding the PIN and OTP to a 3rd party AAA server -> using then the Radius Client chain.
in detail:
- the user is prompted for OTP+PIN
- user enters data
- AA receives data and checks AA template
- if match fails, AA roll over to RADIUSClient with 3rd party AAA server for match
Once the PIN and OTP matches on AA itself stop rollover (to retire the RADIUSClient token)
by: Frank S. | over a year ago | Configuration
Comments
If I understand this correctly
- AA would prompt for OTP+PIN
- User would answer
- AA would then check RADIUS (on success continue)
- on fail, AA would then check RADIUS Client (on success continue)
- on fail, no access
The request is that if configured RADIUS requests that fail would be automatically checked against RADIUS Client.
Is this correct?
NOTE: this fits in our product and can be planned in a future version.