topic Re: Radius Server in Wireless

Radius Server

Victor Fabian — Sun, 04 Jul 2021 00:45:54 GMT

We have been getting this alarm in WCS:

Radius server '192.168.100.219'(port 1813) is deactivated.

I checked and everything and it looks fine , the radius server is still shows enable and functional.

Any idea what could this be??

THank you

Vic

Re: Radius Server

ericgarnel — Fri, 26 Jun 2009 13:41:15 GMT

1813 radius accounting port

Are you using 1812-1813 for radius or 1645 & 1646?

So the auth is working but not accounting

what port do you have configured on the WLCs

listed under

SECURITY, AAA | RADIUS | Accounting?

Re: Radius Server

Victor Fabian — Fri, 26 Jun 2009 14:25:17 GMT

i asked a wireless cisco engineer and he told me that this setting is ok.

This is the way i have it setup:

Authentication

10.138.10.26 1812 enable

10.138.15.129 1812 enable

accounting

10.138.10.26 1813 enable

10.138.15.129 1813 enable

Is it ok for both server to have the same port number ??

THank you

Vic

Re: Radius Server

ericgarnel — Fri, 26 Jun 2009 14:33:31 GMT

So you have 2 servers that do auth & acct, I notice that the error has a different ip address of 192.168.100.219. Your radius is working fine because the .26 & .129 servers are handling it. Where is 192.168.100.219

Re: Radius Server

jicr — Fri, 26 Jun 2009 16:39:38 GMT

Whether your clients are authenticating properly???

This message comes from a different IP address which is not configured on your controller. Even i observed like it is coming on port 1813 which is normally used for accounting so your client authentication wont interrupted.

Can you check the o/p of debug command

"debug aaa events enable" this will give you a perfect idea of wht is happening

Re: Radius Server

Victor Fabian — Fri, 26 Jun 2009 18:46:26 GMT

Sorry about that but my colleague didn't put the real ip address and he just enter a bogus one for the first posting but for the last post those are the real ones.

thank you

Vic

Re: Radius Server

ericgarnel — Fri, 26 Jun 2009 18:52:14 GMT

So are you getting the error message for both radius servers then? if not, would start looking at the suspect radius server and/or network path between the source & destination

Re: Radius Server

Scott Fella — Sun, 28 Jun 2009 13:55:01 GMT

Are you seeing any errors on the radius server logs. It can be an issue with the shared secret. Do you see the error pointing to both radius servers or just one. If you see this on both, you shouldn't have any users connecting. Verify the shared secret and if you are using a 63 characters, then enter the shared secret on the cli of the WLC.