Good Morning Folks;
Below is the output from the show aaa-servers from my asa5540. Notice the status "failed". When the status is thus (on both aaa servers) noone can login the the VPN on the ASA5540. I've checked the duplex / speed etc on the ports feeding the AAA servers and the ASA5540. no errors, no duplex problems..... Also
the AAA servers are used by other systems WITHOUT this problem. Also the ASA and the AAA machines are on the same local LAN segment....After approximately 10 minutes the status will go back to active.......
The ACS is version 3.3 the ASA is running 7.2(1)
I'm tring to findout exactly why the radius client on the ASA5540 is detecting this problem and exactly what it means and how to resolve it......
any help would be terrific.....
Server Group: infinity
Server Protocol: radius
Server Address: 192.168.1.23
Server port: 1645(authentication), 1646(accounting)
Server status: FAILED, Server disabled at 18:53:58 EDT Mon Nov 20 2006
Number of pending requests 0
Average round trip time 30ms
Number of authentication requests 61
Number of authorization requests 0
Number of accounting requests 0
Number of retransmissions 46
Number of accepts 28
Number of rejects 5
Number of challenges 25
Number of malformed responses 0
Number of bad authenticators 0
Number of timeouts 28
Number of unrecognized responses 0
Server Group: infinity
Server Protocol: radius
Server Address: 192.168.1.2
Server port: 1645(authentication), 1646(accounting)
Server status: FAILED, Server disabled at 18:53:57 EDT Mon Nov 20 2006
Number of pending requests 0
Average round trip time 0ms
Number of authentication requests 5
Number of authorization requests 0
Number of accounting requests 0
Number of retransmissions 0
Number of accepts 0
Number of rejects 0
Number of challenges 0
Number of malformed responses 0
Number of bad authenticators 0
Number of timeouts 5
Number of unrecognized responses 0
pierce(config)# show aaa-server
Server Group: LOCAL
Server Protocol: Local database
Server Address: None
Server port: None
Server status: ACTIVE, Last transaction at 18:58:46 EDT Mon Nov 20 2006
Number of pending requests 0
Average round trip time 0ms
Number of authentication requests 154
Number of authorization requests 0
Number of accounting requests 0
Number of retransmissions 0
Number of accepts 0
Number of rejects 154
Number of challenges 0
Number of malformed responses 0
Number of bad authenticators 0
Number of timeouts 0
Number of unrecognized responses 0
Server Group: infinity
Server Protocol: radius
pierce(config)# show aaa-server
Server Group: LOCAL
Server Protocol: Local database
Server Address: None
Server port: None
Server status: ACTIVE, Last transaction at 19:03:52 EDT Mon Nov 20 2006
Number of pending requests 0
Average round trip time 0ms
Number of authentication requests 163
Number of authorization requests 0
Number of accounting requests 0
Number of retransmissions 0
Number of accepts 0
Number of rejects 163
Number of challenges 0
Number of malformed responses 0
Number of bad authenticators 0
Number of timeouts 0
Number of unrecognized responses 0
