04-11-2012 05:21 AM - edited 03-10-2019 06:59 PM
Hello,
I have the next config of radius authentication:
aaa new-model
aaa authentication login default group radius local
aaa authorization exec default group radius local
aaa session-id common
ip radius source-interface Vlan31 vrf LEGACY
radius-server host 10.10.4.18 auth-port 1645 acct-port 1646 key 7 XXXXXXXX
radius-server host 10.10.5.15 auth-port 1812 acct-port 1813 key 7 XXXXXXXX
radius-server vsa send accounting
radius-server vsa send authentication
The authentication don´t work
In the radius server the sniffer not detect the packets from the Cisco 6500 but the icmp packets from the 6500 arrive fine.
C6500# ping vrf LEGACY 10.10.4.18 SOUrce VLAN 31
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.4.18, timeout is 2 seconds:
Packet sent with a source address of 10.10.5.254
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
interface Vlan31
description XXXX
ip vrf forwarding LEGACY
ip address 10.10.5.254 255.255.254.0
no ip redirects
no ip proxy-arp
no ip mroute-cache
end
it's correct my configuration?
Can you help me?
Solved! Go to Solution.
04-15-2012 09:43 AM
What version of IOS are you running on your 6500?
Try the following configuration:
aaa new-model
!
aaa group server radius RADLegacy
server host 10.10.4.18
server host 10.10.5.15
ip vrf forwarding LEGACY
!
aaa authentication login default group RADLegacy local
aaa authorization exec default group RADLegacy local
!
04-12-2012 12:59 PM
What VRF are you trying to enable this aaa ? If it not a per VRF AAA then simply define radius source as vlan31 - drop the vrf bit.
04-15-2012 09:43 AM
What version of IOS are you running on your 6500?
Try the following configuration:
aaa new-model
!
aaa group server radius RADLegacy
server host 10.10.4.18
server host 10.10.5.15
ip vrf forwarding LEGACY
!
aaa authentication login default group RADLegacy local
aaa authorization exec default group RADLegacy local
!
05-02-2012 12:35 AM
Hello,
The problem is solved
I had to include the following configuration
aaa new-model
aaa group server radius RADIUS-GESTION
aaa authentication login default group RADIUS-GESTION local
aaa authorization exec default group RADIUS-GESTION local
ip vrf forwarding GESTION
radius-server host 10.10.5.15 auth-port 1812 acct-port 1813 key 7 XXXXXXXXXXXXXXXX
radius-server host 10.10.4.18 auth-port 1645 acct-port 1646 key 7 XXXXXXXXXXXXXXXX
radius-server vsa send accounting
radius-server vsa send authentication
thanks for the help
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide