cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
399
Views
10
Helpful
3
Replies
schulcz
Beginner

Debug outgoing RADIUS packets

Hi Guys,

 

Wondering about is it possible with any debug command to check on which interface are RADIUS packets going out really?

I would like to send them out from OOB interface, so I used "ip radius source-interface g0/0 vrf Mgmt-vrf" command. I enabled some radius debug commands, but didn't find any that show from which interface packets going out from switch. I suspect they are going in the wrong direction because requests are timed out on the switch and on the server side they don't even arrive based on tcpdump. (OOB IP address and RADIUS servers IP address is in the same vlan/subnet, no firewall or any filter happens between them.)

 

Software: IOS-XE 17.03.02a

 

Thanks!

3 REPLIES 3
balaji.bandi
VIP Guru

First are you able to ping the radius server using the source as VRF Interface? what kind of Radius Server?

 

Device take by default GRT routing table until statically define mgmt routing towards other gateway IP.

also, check from radius server able to reach this VRF mgmt IP for connectivity layer 3 testing.

 

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Yes pings worked, I tested both directions.

It's a remote lab environment with FreeRADIUS, and only the OOB interface was connected to the network. I was lucky that one of my colleagues was on site today and I asked him to patch a normal port. I changed the configuration (removed the "ip radius source interface" command) and it worked immediately.

This confirmed that the packages really didn’t go in the right direction, but I don’t know why.

if still an issue can you post the config, because if you patched to different port it worked, it should be work as expected in mgmt VRF, make sure it reaches the GRT table and able to reach Freeraidius.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help