Cisco MDS-9124 Troubleshooting Guide - Page 336
Verifying RADIUS Server Monitor Configuration Using Fabric Manager, Verifying RADIUS Server Monitor
View all Cisco MDS-9124 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 336 highlights
AAA Issues Chapter 17 Troubleshooting RADIUS and TACACS+ Send documentation comments to [email protected] Verifying RADIUS Server Monitor Configuration Using Fabric Manager To verify or change the RADIUS server monitor configuration using Fabric Manager, follow these steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Choose Switches > Security > AAA > RADIUS and select the Servers tab. You see the RADIUS configuration in the Information panel. Highlight the server that you need to change and click Delete Row to delete this server configuration. Click Create Row to add a new RADIUS server. Set the KeyType and Key fields to the preshared key configured on the RADIUS server. Set the AuthPort and AcctPort fields to the authentication and accounting ports configured on the RADIUS server. Set the Idle Time to configure the time that the switch waits for a RADIUS server to be idle before sending a test message to see if the server is still alive. Set the TimeOut value and click Apply to save these changes. Select the CFS tab and select commit from the Config Action drop-down menu and click Apply Changes to distribute these changes to all switches in the fabric. Choose Switches > Security > AAA and click Create Row to create a server group. Check the list of switches that you want to configure server groups on. Set the Server List field to a comma-separated list of RADIUS servers. Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click Apply to save these changes. Verifying RADIUS Server Monitor Configuration Using the CLI To verify or change the RADIUS server monitor configuration using the CLI, follow these steps: Step 1 Step 2 Step 3 Step 4 Use the show running-config command to view the RADIUS configuration for the server monitor. switch# show running-config | begin radius radius-server deadtime 40 radius-server host 10.1.1.1 key 7 "VagwwtFjq" authentication accounting timeout 20 retransmit 5 radius-server host 10.1.1.1 test idle-time 30 Use the radius-server host ip address test idle-time command to configure the time that the switch waits for a RADIUS server to be idle before sending a test message to see if the server is still alive. Use the radius-server deadtime command to configure the time that the switch waits before retesting a dead server. Use the radius commit command to commit any changes and distribute to all switches in the fabric. 17-6 Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x OL-9285-05