topic Hi,It does indicate the in Network Access Control

Radius connection being rejected by server

cowenssonnenschein — Mon, 11 Mar 2019 05:31:21 GMT

From my Cisco 881 k9 router I run test aaa group radius server 10.20.1.10 username password legacy - -and I get user authentication request was rejected by server --

using windows 2008 as Radius server -- the IP address of Cisco Router is configured as client on server end -- Are the AAA parameters supposed to be set a certain way for access to an external Radius server for authentication?

Hi,What is the reason of

Kanwaljeet Singh — Wed, 04 Mar 2015 19:21:06 GMT

Hi,

What is the reason of rejection on Radius log?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Mar 5 09:41:05.184: RADIUS:

cowenssonnenschein — Wed, 04 Mar 2015 21:40:48 GMT

Mar 5 09:41:05.184: RADIUS: Pick NAS IP for u=0x8524DF98 tableid=0 cfg_addr=10.20.1.250
Mar 5 09:41:05.184: RADIUS(00000000): Config NAS IPv6: ::
Mar 5 09:41:05.184: RADIUS: ustruct sharecount=1
Mar 5 09:41:05.184: Radius: radius_port_info() success=0 radius_nas_port=1
Mar 5 09:41:05.184: RADIUS(00000000): Send Access-Request to 10.20.1.10:1645 id 1645/25, len 58
Mar 5 09:41:05.184: RADIUS(00000000): Sending a IPv4 Radius Packet
Mar 5 09:41:05.184: RADIUS(00000000): Started 5 sec timeout
Mar 5 09:41:05.188: RADIUS: Received from id 1645/25 10.20.1.10:1645, Access-Reject, len 20
Mar 5 09:41:05.188: RADIUS: saved authorization data for user 8524DF98 at 0

Hi,It does indicate the

Kanwaljeet Singh — Thu, 05 Mar 2015 03:03:56 GMT

Hi,

It does indicate the request sent to Radius and rejection by Radius server. Can you check on the Radius server itself, why the rejection happened? The configuration for aaa should be standard on router.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Hi Cowen, If you are seeing

Tushar Bangia — Thu, 05 Mar 2015 05:14:00 GMT

Hi Cowen,

If you are seeing "authentication reject" on router than it confirms the request is making to the RADIUS server.

Please confirm which RADIUS server you are working with, also validate the logs on the RADIUS server to identify the reason for authentication rejection.

Regards,

Tushar Bangia

Note: Please mark answers if they are helpful.