topic Re: Ignoring Logged Messages in Radius Live logs for test user in Network Access Control

Ignoring Logged Messages in Radius Live logs for test user

ShaunGreen — Thu, 05 Nov 2020 16:26:09 GMT

Hi All,

I have the following commands to test that the ISE-PSN is up and responding. When it drops, then dot1x fails over to the Critical access policy.

radius server xxx-PSN
address ipv4 10.x.x.x auth-port 1812 acct-port 1813
automate-tester username test-user idle-time 1
key 7 xxxxx

That works fine, but the only problem I have is the amount of logs I see in the Radius live logs.

Is there a way to ignore these logs messages, or is there a better way of doing it?

Thanks, Simon

Re: Ignoring Logged Messages in Radius Live logs for test user

martin.fischer — Thu, 05 Nov 2020 18:19:46 GMT

Hi @ShaunGreen

Yes, on ISE go to Administration -> System -> Logging -> Collection Filters. Add an entry with attribute 'User Name', Value = test-user, Filter Type = Filter All.

Re: Ignoring Logged Messages in Radius Live logs for test user

Massimo Baschieri — Fri, 06 Nov 2020 05:09:01 GMT

Or you can add the prode-on option, this way the probes are sent only when primary radius fails.

Re: Ignoring Logged Messages in Radius Live logs for test user

ShaunGreen — Fri, 06 Nov 2020 07:29:12 GMT

Hi @Massimo Baschieri ,

Sorry my ISE skills aren't fantastic, I'm still building my knowledge up, could you please provide a few more details with regard to adding the probe-on option?

Re: Ignoring Logged Messages in Radius Live logs for test user

martin.fischer — Fri, 06 Nov 2020 09:00:12 GMT

Hi @ShaunGreen

For the command 'automate-tester username test-user idle-time 1' you can use the probe-on instead of idle-time.

If you use idle-time then the probes will be sent regularly in the defined interval independent of the server state (UP/DEAD). If you use the probe-on keyword instead, then the probes will only be sent if IOS recognized the server as DEAD.

Check the following document and search for 'Automate-tester Probe-on' for more details:

https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/whitepaper_C11-731907.html