Verifying Radius Server Monitor Configuration Using Fabric Manager; Verifying Radius Server Monitor Configuration Using The Cli - Cisco 9134 - MDS Multilayer Fabric Switch Troubleshooting Manual

AAA Issues
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Verifying RADIUS Server Monitor Configuration Using Fabric Manager

To verify or change the RADIUS server monitor configuration using Fabric Manager, follow these steps:
Step 1 Choose Switches > Security > AAA > RADIUS and select the Servers tab. You see the RADIUS
configuration in the Information panel.
Step 2 Highlight the server that you need to change and click Delete Row to delete this server configuration.
Step 3 Click Create Row to add a new RADIUS server.
Set the KeyType and Key fields to the preshared key configured on the RADIUS server.
Step 4
Set the AuthPort and AcctPort fields to the authentication and accounting ports configured on the
Step 5
RADIUS server.
Set the Idle Time to configure the time that the switch waits for a RADIUS server to be idle before
Step 6
sending a test message to see if the server is still alive.
Step 7 Set the TimeOut value and click Apply to save these changes.
Select the CFS tab and select commit from the Config Action drop-down menu and click Apply
Step 8
Changes to distribute these changes to all switches in the fabric.
Step 9 Choose Switches > Security > AAA and click Create Row to create a server group.
Step 10 Check the list of switches that you want to configure server groups on.
Set the Server List field to a comma-separated list of RADIUS servers.
Step 11
Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click
Step 12
Apply to save these changes.

Verifying RADIUS Server Monitor Configuration Using the CLI

To verify or change the RADIUS server monitor configuration using the CLI, follow these steps:
Use the show running-config command to view the RADIUS configuration for the server monitor.
Step 1
switch# show running-config | begin radius
radius-server deadtime 40
radius-server host 10.1.1.1 key 7 "VagwwtFjq" authentication accounting timeout 20
retransmit 5
radius-server host 10.1.1.1 test idle-time 30
Use the radius-server host ip address test idle-time command to configure the time that the switch
Step 2
waits for a RADIUS server to be idle before sending a test message to see if the server is still alive.
Use the radius-server deadtime command to configure the time that the switch waits before retesting
Step 3
a dead server.
Use the radius commit command to commit any changes and distribute to all switches in the fabric.
Step 4
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
17-6
Chapter 17 Troubleshooting RADIUS and TACACS+
OL-9285-05