AAA with RADIUS on ASA

[Kimberly Adams]

Hey Everyone,

I am configuring AAA with RADIUS on our remote ASA firewalls.  This is pretty straight forward, but I have some firewalls that this is not working on.  I have upgraded the IOS image on the ASA 5510 to ASA804-K8.BIN on all of them.  The strange part is some of them are working and some of them are not working.

Just wondering if anyone else has come across this before and what info do you need to give me an assist.

Thanks in advance,

Kimberly

[Herbert Baerten · Accepted solution]

Hi Kimberly,

just curious: why 8.0.4 and not 8.0.5 ?

What are you using radius for ? What is the radius server? Did you configure all the ASAs on the radius server(s) ? Did you use the correct shared secret?

Is there anything different between the working ASAs and the failing ones? Configuration, location in the network, etc?

If the above doesn't help please post the config of a failing ASA (or at least the relevant parts, and make sure to remove any sensitive data) and the output of:

debug radius

debug aaa authen

debug aaa common 254

You can test just the radius part with the cli command "test aaa-server authentication ..."

hth

Herbert

[Kimberly Adams]

Herbert,

Thank you for giving me ideas on which direction to head in with this.  I should have checked my team mate's work on adding the firewalls to the RADIUS server.  Now that I have added them in, they are all working great!

Thank you.

Kimberly