ACS 5.3 :11014 RADIUS packet contains invalid attribute(s)

[glearmon]

Anyone know how I can determine what attribute is coming up as 'invalid' ?

Tried full debug and looked at all the logs - nothing.

[Dev Vishwakarma]

Garrey,

You can generate a support bundle from ACS using:

https://supportforums.cisco.com/docs/DOC-23316

After unzipping the bundle, go to/logs/localLogs and grep for your username, that will show you the ACSsession ID there. Copy that session ID and grep for that in /logs/debugLogs/ACSRuntime.log. This will show all the internal processing of the ACS 5.3 along with all the RADIUS packets received from the NAS in details.

Regards,

Dev

[Nick Lowe]

glearmon,

I'm curious, which NAS was this occurring with? Did you ever get it resolved?

A packet capture and analysis against the RADIUS RFCs is a good way of determining which attribute is at fault. It's always far more likely that the NAS has an issue than the RADIUS server.

Cheers,

Nick