topic Re: aaa authentication login default group radius local in Network Access Control

aaa authentication login default group radius local

mooney1111 — Fri, 21 Feb 2020 18:58:28 GMT

Hi Guys.

I'm looking for some clarification, recently installed windows radius server to use with core and access switches in my network. having some issues with the 2nd method i.e local, the initial login using the radius method however if i try to login in using the local database my authentication is refused. any thoughts?

Re: aaa authentication login default group radius local

Rob Ingram — Thu, 14 Jun 2018 19:32:21 GMT

Hi,
You can only login using "local" if the radius server(s) are unreachable

HTH

Re: aaa authentication login default group radius local

mooney1111 — Thu, 14 Jun 2018 19:38:38 GMT

Yes true, i believe that to test this theory i may have to shutdown the radius server and try the authentication again?

Re: aaa authentication login default group radius local

Rob Ingram — Thu, 14 Jun 2018 19:43:16 GMT

Yes, you need to make sure the switch knows the radius server is down/dead. Use "show aaa servers" to confirm the status.

This global command "radius-server dead-criteria time 5 tries 3" might be useful

Re: aaa authentication login default group radius local

mooney1111 — Thu, 14 Jun 2018 19:46:22 GMT

Yes, Luckily for myself we only have a one radius server, i will test tomorrow, thanks for the commands