11-05-2020 08:26 AM
Hi All,
I have the following commands to test that the ISE-PSN is up and responding. When it drops, then dot1x fails over to the Critical access policy.
radius server xxx-PSN
address ipv4 10.x.x.x auth-port 1812 acct-port 1813
automate-tester username test-user idle-time 1
key 7 xxxxx
That works fine, but the only problem I have is the amount of logs I see in the Radius live logs.
Is there a way to ignore these logs messages, or is there a better way of doing it?
Thanks, Simon
Solved! Go to Solution.
11-05-2020 09:09 PM
Or you can add the prode-on option, this way the probes are sent only when primary radius fails.
11-06-2020 01:00 AM
Hi @ShaunGreen
For the command 'automate-tester username test-user idle-time 1' you can use the probe-on instead of idle-time.
If you use idle-time then the probes will be sent regularly in the defined interval independent of the server state (UP/DEAD). If you use the probe-on keyword instead, then the probes will only be sent if IOS recognized the server as DEAD.
Check the following document and search for 'Automate-tester Probe-on' for more details:
11-05-2020 10:12 AM - edited 11-05-2020 10:19 AM
Hi @ShaunGreen
Yes, on ISE go to Administration -> System -> Logging -> Collection Filters. Add an entry with attribute 'User Name', Value = test-user, Filter Type = Filter All.
11-05-2020 09:09 PM
Or you can add the prode-on option, this way the probes are sent only when primary radius fails.
11-05-2020 11:29 PM
Hi @Massimo Baschieri ,
Sorry my ISE skills aren't fantastic, I'm still building my knowledge up, could you please provide a few more details with regard to adding the probe-on option?
11-06-2020 01:00 AM
Hi @ShaunGreen
For the command 'automate-tester username test-user idle-time 1' you can use the probe-on instead of idle-time.
If you use idle-time then the probes will be sent regularly in the defined interval independent of the server state (UP/DEAD). If you use the probe-on keyword instead, then the probes will only be sent if IOS recognized the server as DEAD.
Check the following document and search for 'Automate-tester Probe-on' for more details:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide