Configuration Examples For Radius Server Load Balancing - Cisco Catalyst 2960 series Configuration Manual

Configuration Examples for RADIUS Server Load Balancing

Example:
Device# test aaa group SG1 test lab new-code
00:06:07: RADIUS/ENCODE(00000000):Orig. component type = INVALID
00:06:07: RADIUS/ENCODE(00000000): dropping service type, "radius-server attribute 6 on-for-login-auth"
is off
00:06:07: RADIUS(00000000): Config NAS IP: 192.0.2.4
00:06:07: RADIUS(00000000): sending
00:06:07: RADIUS/ENCODE: Best Local IP-Address 192.0.2.141 for Radius-Server 192.0.2.176
00:06:07: RADIUS(00000000): Send Access-Request to 192.0.2.176:1645 id 1645/1, len 50
00:06:07: RADIUS:
00:06:07: RADIUS:
00:06:07: RADIUS:
00:06:07: RADIUS:
00:06:07: RADIUS: Received from id 1645/1 192.0.2.176:1645, Access-Reject, len 44
00:06:07: RADIUS:
00:06:07: RADIUS:
00:06:07: RADIUS:
00:06:07: RADIUS:
00:06:07: RADIUS(00000000): Received from id 1645/1
00:06:07: RADIUS/DECODE: Reply-Message fragments, 22, total 22 bytes
Configuration Examples for RADIUS Server Load Balancing
Example: Enabling Load Balancing for a Named RADIUS Server Group
The following examples show load balancing enabled for a named RADIUS server group. These examples
are shown in three parts: the current configuration of the RADIUS command output, debug output, and
authentication, authorization, and accounting (AAA) server status information.
The following sample output shows the relevant RADIUS configuration:
Device# show running-config
.
.
.
aaa group server radius server-group1
server 192.0.2.238 auth-port 2095 acct-port 2096
server 192.0.2.238 auth-port 2015 acct-port 2016
load-balance method least-outstanding batch-size 5
!
aaa authentication ppp default group server-group1
aaa accounting network default start-stop group server-group1
.
.
.
The lines in the current configuration of the preceding RADIUS command output are defined as follows:
• The aaa group server radius command shows the configuration of a server group with two member
• The load-balance command enables load balancing for global RADIUS server groups with the batch
• The aaa authentication ppp command authenticates all PPP users using RADIUS.
• The aaa accounting command enables sending of all accounting requests to the AAA server when the
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
952
authenticator CA DB F4 9B 7B 66 C8 A9 - D1 99 4E 8E A4 46 99 B4
User-Password
User-Name
NAS-IP-Address
authenticator 2F 69 84 3E F0 4E F1 62 - AB B8 75 5B 38 82 49 C3
Reply-Message
41 75 74 68 65 6E 74 69 63 61 74 69 6F 6E 20 66
61 69 6C 75 72 65
servers.
size specified.
client is authenticated and then disconnected using the start-stop keyword.
[2] 18 *
[1] 6 "test"
[4] 6 192.0.2.141
[18] 24
[Authentication f]
[failure]