Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Cannot Authenticate to RSA RADIUS from 2600 Router

I am attempting to use the the RSA RADIUS server with Cisco AAA. configured as follows

aaa new-model

aaa authentication login default group radius enable

aaa authorization exec default if-authenticated

aaa accounting commands 15 default start-stop group radius

radius-server host 1.1.1.1 auth-port 1645 acct-port 1646

radius-server key password

DEBUG BELOW:

01:02:56: RADIUS: ustruct sharecount=1

01:02:56: Radius: radius_port_info() success=1 radius_nas_port=1

01:02:56: RADIUS: Initial Transmit tty67 id 6 10.7.0.3:1645, Access-Request, l

78

01:02:56: Attribute 4 6 0A050004

01:02:56: Attribute 5 6 00000043

01:02:56: Attribute 61 6 00000005

01:02:56: Attribute 1 8 616C6C65

01:02:56: Attribute 31 14 3137322E

01:02:56: Attribute 2 18 444F71F6

01:03:01: RADIUS: Retransmit id 6

01:03:06: RADIUS: Retransmit id 6

01:03:11: RADIUS: Retransmit id 6

01:03:16: RADIUS: Trying next server (10.7.0.4:1645,1646) for id6

01:03:16: RADIUS: Retransmit id 6

01:03:21: RADIUS: Retransmit id 6

01:03:26: RADIUS: Retransmit id 6

01:03:31: RADIUS: Retransmit id 6

01:03:36: RADIUS: Tried all servers.

01:03:36: RADIUS: No valid server found. Trying any viable server

01:03:36: RADIUS: Tried all servers.

01:03:36: RADIUS: No response for id 6

01:03:36: RADIUS: No response from server

1 REPLY
Cisco Employee

Re: Cannot Authenticate to RSA RADIUS from 2600 Router

As you can see from the debug you're getting no response from the Radius server. Can you ping it from the router? Is it listening on ports 1645/1646, or does it use ports 1812/1813? You could try doing:

> radius-server host 1.1.1.1 auth-port 1812 acct-port 1813

and see if that works better for you.

187
Views
0
Helpful
1
Replies
CreatePlease to create content