S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
17-6
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
OL-9285-05
Chapter 17 Troubleshooting RADIUS and
AAA Issues
Verifying RADIUS Server Monitor Configuration Using Fabric Manager
To verify or change the RADIUS server monitor configuration using Fabric Manager, follow these steps:
Step 1
Choose
Switches > Security > AAA > RADIUS
and select the
Servers
tab. You see the RADIUS
configuration in the Information panel.
Step 2
Highlight the server that you need to change and click
Delete Row
to delete this server configuration.
Step 3
Click
Create Row
to add a new RADIUS server.
Step 4
Set the KeyType and Key fields to the preshared key configured on the RADIUS server.
Step 5
Set the AuthPort and AcctPort fields to the authentication and accounting ports configured on the
RADIUS server.
Step 6
Set the Idle Time to configure the time that the switch waits for a RADIUS server to be idle before
sending a test message to see if the server is still alive.
Step 7
Set the TimeOut value and click
Apply
to save these changes.
Step 8
Select the
CFS
tab and select
commit
from the Config Action drop-down menu and click
Apply
Changes
to distribute these changes to all switches in the fabric.
Step 9
Choose
Switches > Security > AAA a
nd click
Create Row
to create a server group.
Step 10
Check the list of switches that you want to configure server groups on.
Step 11
Set the Server List field to a comma-separated list of RADIUS servers.
Step 12
Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click
Apply
to save these changes.
Verifying RADIUS Server Monitor Configuration Using the CLI
To verify or change the RADIUS server monitor configuration using the CLI, follow these steps:
Step 1
Use the
show running-config
command to view the RADIUS configuration for the server monitor.
switch#
show running-config | begin radius
radius-server
deadtime 40
radius-server host 10.1.1.1 key 7 “VagwwtFjq” authentication accounting timeout 20
retransmit 5
radius-server host 10.1.1.1 test
idle-time 30
Step 2
Use the
radius-server host
ip address
test idle-time
command to configure the time that the switch
waits for a RADIUS server to be idle before sending a test message to see if the server is still alive.
Step 3
Use the
radius-server deadtime
command to configure the time that the switch waits before retesting
a dead server.
Step 4
Use the
radius commit
command to commit any changes and distribute to all switches in the fabric.
