Cannot Authenticate to RSA RADIUS from 2600 Router

allendaniels · ‎10-28-2002

I am attempting to use the the RSA RADIUS server with Cisco AAA. configured as follows

aaa new-model

aaa authentication login default group radius enable

aaa authorization exec default if-authenticated

aaa accounting commands 15 default start-stop group radius

radius-server host 1.1.1.1 auth-port 1645 acct-port 1646

radius-server key password

DEBUG BELOW:

01:02:56: RADIUS: ustruct sharecount=1

01:02:56: Radius: radius_port_info() success=1 radius_nas_port=1

01:02:56: RADIUS: Initial Transmit tty67 id 6 10.7.0.3:1645, Access-Request, l

78

01:02:56: Attribute 4 6 0A050004

01:02:56: Attribute 5 6 00000043

01:02:56: Attribute 61 6 00000005

01:02:56: Attribute 1 8 616C6C65

01:02:56: Attribute 31 14 3137322E

01:02:56: Attribute 2 18 444F71F6

01:03:01: RADIUS: Retransmit id 6

01:03:06: RADIUS: Retransmit id 6

01:03:11: RADIUS: Retransmit id 6

01:03:16: RADIUS: Trying next server (10.7.0.4:1645,1646) for id6

01:03:16: RADIUS: Retransmit id 6

01:03:21: RADIUS: Retransmit id 6

01:03:26: RADIUS: Retransmit id 6

01:03:31: RADIUS: Retransmit id 6

01:03:36: RADIUS: Tried all servers.

01:03:36: RADIUS: No valid server found. Trying any viable server

01:03:36: RADIUS: Tried all servers.

01:03:36: RADIUS: No response for id 6

01:03:36: RADIUS: No response from server

gfullage · ‎10-28-2002

As you can see from the debug you're getting no response from the Radius server. Can you ping it from the router? Is it listening on ports 1645/1646, or does it use ports 1812/1813? You could try doing:

> radius-server host 1.1.1.1 auth-port 1812 acct-port 1813

and see if that works better for you.