In the process of implementing 802.1x in my organization and have setup several radius servers as failover.  We ran into an issue with the configuration of one of our radius servers.  The server was still on, pingable, was passing authentication but was sending back bad password errors.  I believe since it was still reachable, it didn't failover and possibly wouldn't since it was sending back a bad password error. In the documentation, it says if it were to become unreachable, it would failover.   "Where the available server with higher priority will be used (priority 1 is the highest). If Server 1 were to become unreachable, Server 2 would become active, and so on."   Say one of our sysadmin's breaks a cert update or rebuilds it and the configuration is wrong.  Would this be criteria to allow at least an attempt with the 2nd radius server?  ... View more