Radius connection being rejected by server

[cowenssonnenschein]

From my Cisco 881 k9 router I run test aaa group radius server 10.20.1.10 username password legacy - -and I get user authentication request was rejected by server -- 

using windows 2008 as Radius server -- the IP address of Cisco Router is configured as client on server end -- Are the AAA parameters supposed to be set a certain way for access to an external Radius server for authentication?

[Kanwaljeet Singh]

Hi,

What is the reason of rejection on Radius log?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[cowenssonnenschein]

Mar  5 09:41:05.184: RADIUS: Pick NAS IP for u=0x8524DF98 tableid=0 cfg_addr=10.20.1.250
Mar  5 09:41:05.184: RADIUS(00000000): Config NAS IPv6: ::
Mar  5 09:41:05.184: RADIUS: ustruct sharecount=1
Mar  5 09:41:05.184: Radius: radius_port_info() success=0 radius_nas_port=1
Mar  5 09:41:05.184: RADIUS(00000000): Send Access-Request to 10.20.1.10:1645 id 1645/25, len 58
Mar  5 09:41:05.184: RADIUS(00000000): Sending a IPv4 Radius Packet
Mar  5 09:41:05.184: RADIUS(00000000): Started 5 sec timeout
Mar  5 09:41:05.188: RADIUS: Received from id 1645/25 10.20.1.10:1645, Access-Reject, len 20
Mar  5 09:41:05.188: RADIUS: saved authorization data for user 8524DF98 at 0

[Kanwaljeet Singh]

Hi,

It does indicate the request sent to Radius and rejection by Radius server. Can you check on the Radius server itself, why the rejection happened? The configuration for aaa should be standard on router.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[Tushar Bangia]

Hi Cowen,

If you are seeing "authentication reject" on router than it confirms the request is making to the RADIUS server.

Please confirm which RADIUS server you are working with, also validate the logs on the RADIUS server to identify the reason for authentication rejection.

Regards,

Tushar Bangia

Note: Please mark answers if they are helpful.