Testing and Troubleshooting Radius Configuration

The commands that are used for RADIUS configuration testing and configuration are very similar to ones used by TACACS and AAA.

■ debug aaa authentication

■ debug aaa authorization

■ debug aaa accounting

■ show accounting

Example 8-9 shows a sample output from the debug radius command.

Example 8-9 Sample Output from the debug radius Command

NAS# debug radius

Radius protocol debugging is on

Radius packet hex dump debugging is off

Router#

14:51:04: RADIUS: ustruct sharecount=3

14:51:04: Radius: radius_port_info() success=0 radius_nas_port=1 14:51:04: RADIUS: Initial Transmit ISDN 0:D:23 id 0 192.168.100.64:1824, Accounting-Request, len 358

14

51

04:

RADIUS:

NAS-IP-Address [4] 6 10.100.10.0

14

51

04:

RADIUS:

Vendor, Cisco [26] 19 VT=02 TL=13

ISDN 0:D:23

14

51

04:

RADIUS:

NAS-Port-Type [61] 6 Async

14

51

04:

RADIUS:

User-Name [1] 12 "7358827539"

14

51

04:

RADIUS:

Called-Station-Id [30] 7 "74762"

14

51

04:

RADIUS:

Calling-Station-Id [31] 12 "7358827539"

14

51

04:

RADIUS:

Acct-Status-Type [40] 6 Start

14

51

04:

RADIUS:

Service-Type [6] 6 Login

14

51

04:

RADIUS:

Vendor, Cisco [26] 27 VT=33 TL=21

h323-gw-id=5300_43

14

51

04:

RADIUS:

Vendor, Cisco [26] 55 VT=01 TL=49

Example 8-9 Sample Output from the debug radius Command (Continued)

h323-incoming-conf-id=8F3A3163 B4980003 0 29BD0 14:51:04: RADIUS: Vendor, Cisco [26] 31 VT=26 TL=25 h323-call-origin=answer 14:51:04: RADIUS: Vendor, Cisco [26] 32 VT=27 TL=26 h323-call-type=Telephony 14:51:04: RADIUS: Vendor, Cisco [26] 57 VT=25 TL=51 h323-setup-time=*13:14:02.222 EST sun mar 22 2003 14:51:04: RADIUS: Vendor, Cisco [26] 46 VT=24 TL=40 h323-conf-id=8F3A3163

B4980003 0 29BD0 14:51:04: RADIUS: Acct-Session-Id [44] 10 "00000004" 14:51:04: RADIUS: Delay-Time [41] 6 0

Example 8-10 is sample output from the debug aaa accounting command.

Example 8-10 Sample Output from the show accounting Command

NAS# debug aaa accounting

08:22:12 : AAA/ACCT: EXEC acct start, line 10

08:22:22: AAA/ACCT: Connect start, line 10, glare

08:22:37: AAA/ACCT: Connection acct stop:

task_id=11 service=exec port=10 protocol=telnet address=192.168

100.17 cmd=glare

bytes_in=283 bytes_out=84 paks_in=32 paks_out=41 elapsed_time=

12

The show accounting command enables you to display the active accountable events on the network. It provides system administrators with a quick look at what is going on, and it also can help collect information in the event of a data loss on the accounting server. (Refer to Example 8-11.)

Example 8-11 Sample Output of the show accounting Command NAS# show accounting

Active Accounted actions on Interface Serial4:16, User meron Priv 1 Task ID 27, Network Accounting record, 00:00:13 Elapsed task_id=27 timezone=EDT service=ppp mlp-links-max=4 mlp-links-current=4 protocol=ip addr=192.168.100.12 mlp-sess-id=6

Active Accounted actions on Interface Serial4:17, User meron Priv 1 Task ID 29, Network Accounting record, 00:00:44 Elapsed task_id=29 timezone=EDT service=ppp mlp-links-max=4 mlp-links-current=4 protocol=ip addr=192.168.100.12mlp-sess-id=1

Active Accounted actions on Interface Serial4:18, User meron Priv 1 Task ID 17, Network Accounting record, 00:01:19 Elapsed task_id=17 timezone=EDT service=ppp mlp-links-max=4 mlp-links-current=4 protocol=ip addr=192.168.100.12mlp-sess-id=1

Active Accounted actions on Interface Serial4:20, User meron Priv 1 Task ID 14, Network Accounting record, 00:01:03 Elapsed task_id=14 timezone=EDT service=ppp mlp-links-max=4 mlp-links-current=4 mlp-sess-id=1 protocol=ip addr=192.168.100.12

continues

Example 8-11 Sample Output of the show accounting Command (Continued)

Active Accounted actions on , User (not logged in) Priv 0

Task ID 1, Resource-management Accounting record, 04:32:21 Elapsed task_id=1 timezone=EDT rm-protocol-version=1.0

service=resource-management protocol=nas-status event=nas-start reason=reload

Overall Accounting Traffic

Starts Stops Updates Active Drops

Network 8 4 0 4 0

Connect 0 0 0 0 0

Command 0 0 0 0 0

User creates:21, frees:9, Acctinfo mallocs:15, frees:6 Users freed with accounting unaccounted for:0 Queue length:0

Was this article helpful?

0 0

Post a comment