Troubleshooting Username/Password Configuration; Troubleshooting Radius Configuration - Cisco MDS 9000 Series Troubleshooting Manual

Chapter 5 Troubleshooting IP Storage Issues
S e n d c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
authentication method:local
switch#

Troubleshooting Username/Password Configuration

The client side username and password should be check against either the switch's local configuration
file or the Radius user database.
Use the show user-account command to verify that the iSCSI users are configured correctly with the
username and password, if authentication is against the switch's local user database. Note that the iSCSI
password must be at least 16 characters.
switch# sh user-account iscsi
username:iscsi
secret:1234567812345678
username:iscsiuser
secret:1234567812345678

Troubleshooting Radius Configuration

If authentication is against the Radius server, ping the Radius server to and from the switch to make sure
it can be reached over IP. Execute the show radius-server command to make sure radius key and port
for authentication and accounting match exactly with is configured on Radius server.
switch# show radius-server
retransmission count:3
timeout value:5
following RADIUS servers are configured:
Adjust the radius timeout and retransmission accordingly, as they have default value of 1 sec and 1 time.
Figure 5-13
OL-5183-02, Cisco MDS SAN-OS Release 1.3
telnet/ssh:not enabled
iscsi:enabled <<<<<<<<<<<<<<<<<<<
console:enabled
telnet/ssh:enabled
iscsi:enabled
171.71.49.197:
available for authentication on port:1812
available for accounting on port:1813
RADIUS shared secret:radius
shows a Windows-based Radius server configuration.
Troubleshooting iSCSI Issues
Cisco MDS 9000 Family Troubleshooting Guide
5-33