C9800 Test radius server

[Denis Negik]

Good day. Tell me why the radius server test command is not accepted? It says: Invalid input detected at.

[M02@rt37 · Accepted solution]

Hello @Denis Negik 

test aaa group radius ... ?

[Mark Elsen]

 @Denis Negik  'browse' the available commands using : show running-confog all | inc test

 Or : show running-config all | inc radius

 M.

[Denis Negik]

aaa group server radius RADIUS-GROUP
ip radius source-interface Vlan1
aaa server radius dynamic-author
radius-server attribute 77 include-in-acct-req
radius-server attribute 77 include-in-access-req
radius-server attribute 11 default direction out
radius-server attribute nas-port format a
radius-server attribute wireless accounting call-station-id macaddress
radius-server attribute wireless accounting callStationIdCase lower
radius-server attribute wireless authentication callStationIdCase lower
radius-server attribute wireless authentication call-station-id ap-macaddress-ssid
radius-server dead-criteria time 10 tries 10
radius-server cache expiry 24 enforce hours
radius-server transaction max-tries 8
radius-server retransmit 3
radius-server timeout 5
radius-server ipc-limit in 10
radius-server ipc-limit done 10
radius-server vsa send accounting
radius-server vsa send authentication
radius server WiFiClients
local-auth ap radius
local-auth ap radius

[Mark Elsen]

 - Also checkput https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_aaa_dead_server_detection.html

 M.

[Scott Fella · Accepted solution]

You might already know, but its a different command on the 9800 and different ways to test.

Radius: test aaa group radius server <server> auth-port 1812 <username> <password> legacy
Radius: test aaa group ISE-RADIUS<username> <password> legacy
TACACS+: test aaa group tacacs+<username> <password> legacy