Monitoring And Maintaining Aaa Pod Server; Configuration Example For Radius Packet Of Disconnect - Cisco 10000-2P2-2DC Software Configuration Manual

Chapter 16 Configuring RADIUS Features

Monitoring and Maintaining AAA POD Server

To monitor an AAA POD server and troubleshoot problems:
•
•
•
Because debugging output is assigned high priority in the CPU process, it can render the system
Caution
unusable. For this reason, use debug commands only to troubleshoot specific problems or during
troubleshooting sessions with Cisco Systems technical support personnel. Moreover, it is best to use
debug commands during periods of lower network traffic and fewer users. Debugging during these
periods decreases the likelihood that increased debug command processing overhead will affect system
use.

Configuration Example for RADIUS Packet of Disconnect

Example 16-3
Example 16-3 Configuring a Router as an AAA POD Server
Router(config)# aaa pod server server-key xyz123
OL-2226-23
Ensure that the POD port is configured correctly in both the router (using aaa pod server command)
and the RADIUS server. Both should be the same.
Ensure that the shared-secret key configured in the router (using aaa pod server command) and in
the AAA server are the same.
Use debug commands:
– debug aaa pod—displays debug messages for POD packets
– debug aaa authentication—displays debug messages for authentication
– debug aaa accounting—displays debug messages for accounting records
debug radius—displays debug messages for RADIUS packets
–
The following example shows output from the debug aaa pod command and indicates a successful
POD request.
Router# debug aaa pod
AAA POD packet processing debugging is on
General OS:
AAA POD packet processing debugging is on
Router#
4d18h: ++++++ POD Attribute List ++++++
4d18h: 6291C598 0 00000009 username(336) 8 pod_user
4d18h: 7085EE1C 0 00000001 nas-ip-address(439) 4 23.3.7.3
4d18h:
4d18h: POD: 2.0.0.210 user pod_user 0.0.0.0 sessid 0x0 key 0x0
4d18h: POD: Line
4d18h: POD: Skip
4d18h: POD: KILL Virtual- pod_user 104.1.2.38
4d18h: POD: Skip Virtual- <NULL>
4d18h: POD: Sending ACK from port 3799 to 2.0.0.210/64917
provides a configuration example for a router performing as an AAA POD server:
User IDB Session Id Key
<NULL> 0.0.0.0 0x363
0x421A
0.0.0.0 0x421B
Cisco 10000 Series Router Software Configuration Guide
RADIUS Packet of Disconnect
0x0
0xD4105397
0x0
16-59