IKEv2 with EAP-RADIUS: Any fallback option if the RADIUS server is down?

[viniciusferrao]

Hello guys,

I'm deploying an IKEv2 VPN authenticating against a RADIUS service within the pfSense box, but I'm afraid of the complications of this approach when the RADIUS server is down.

Since the RADIUS is behind the pfSense box, in an event of a failure, I'll lose the ability to connect to the IKEv2 VPN and left without any option to enter the LAN.

I could do a simple workaround with some fallback mode with a local user account within the pfSense box. But the problem is this "fallback mode". This even exist?

What are the options in this case?

Thanks in advance,
Vinícius.