Hello Ara,
I hope you are doing great,
From the configuration you have posted it seems good, you could also add the below command:
switch(config)# ip radius source-interface mgmt 0
This way the request will source to that interface or the VLAN where the AAA servers are, now for some switches there are basic reachability since you saw logs on the event viewer. Please make to also configure all the switches are RADIUS Clients in the NPS switch and select the Vendor Name "Cisco" so that the Radius can understand the Radius format from the nexus switches. Below the steps:
To add siwtch as RADIUS client:
- Logon to server with NPS using account with admin credentials.
- Go to Start / Administrative Tools and then click Network Policy Server.
- Expand RADIUS Client and Servers.
- Right-click on RADIUS Clients and click New from context menu.
- In New RADIUS Client window Settings tab enter:
- Friendly name of the switch – name to recognize router, usually same as hostname.
- Address (IP and DNS) – IP address of the router or hostname – if hostname used proper hostname needs to be registered in DNS prior to RADIUS configuration.
- Shared secret – passphrase which was configured on router which will allow to identify router when requesting AAA from RADIUS.
- In New RADIUS Client window Advanced tab enter:
- Vendor name – Cisco – as in this example Cisco switch will communicate with RADIUS.
- Once confirmed with OK we will see that switch has been added to RADIUS configuration as client.
Probably you could have all of these set up already, please provide a wireshark capture so this way we could see if there could be something else, make sure that if there is any some sort of IPS/NGIPS device to add a trust exception or firewall to allow traffic.
I hoped I helped you, please rate all helpful posts, and keep us posted,
David Castro,
