Cisco Systems 10000 Network Router User Manual


 
16-21
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Chapter 16 Configuring RADIUS Features
RADIUS Packet of Disconnect
Monitoring and Maintaining AAA POD Server
To monitor an AAA POD server and troubleshoot problems:
Ensure that the POD port is configured correctly in both the router (using aaa pod server command)
and the RADIUS server. Both should be the same.
Ensure that the shared-secret key configured in the router (using aaa pod server command) and in
the AAA server are the same.
Use debug commands:
debug aaa pod—displays debug messages for POD packets
debug aaa authentication—displays debug messages for authentication
debug aaa accounting—displays debug messages for accounting records
debug radius—displays debug messages for RADIUS packets
The following example shows output from the debug aaa pod command and indicates a successful
POD request.
Router# debug aaa pod
AAA POD packet processing debugging is on
General OS:
AAA POD packet processing debugging is on
Router#
4d18h: ++++++ POD Attribute List ++++++
4d18h: 6291C598 0 00000009 username(336) 8 pod_user
4d18h: 7085EE1C 0 00000001 nas-ip-address(439) 4 23.3.7.3
4d18h:
4d18h: POD: 2.0.0.210 user pod_user 0.0.0.0 sessid 0x0 key 0x0
4d18h: POD: Line User IDB Session Id Key
4d18h: POD: Skip <NULL> 0.0.0.0 0x363 0x0
4d18h: POD: KILL Virtual- pod_user 104.1.2.38 0x421A 0xD4105397
4d18h: POD: Skip Virtual- <NULL> 0.0.0.0 0x421B 0x0
4d18h: POD: Sending ACK from port 3799 to 2.0.0.210/64917
Caution Because debugging output is assigned high priority in the CPU process, it can render the system
unusable. For this reason, use debug commands only to troubleshoot specific problems or during
troubleshooting sessions with Cisco Systems technical support personnel. Moreover, it is best to use
debug commands during periods of lower network traffic and fewer users. Debugging during these
periods decreases the likelihood that increased debug command processing overhead will affect system
use.
Configuration Example for RADIUS Packet of Disconnect
Example 16-3 provides a configuration example for a router performing as an AAA POD server:
Example 16-3 Configuring a Router as an AAA POD Server
Router(config)# aaa pod server server-key xyz123