6509 - Who are you talking to?

[johnaceti]

Working on a 6509 that has Radius authentication set.

All works well except some errors in the radius log. It appears that there is something in the 6509 that trys to authenticate via Radius in order to talk to itself (client and server ip the same). The entry pops into the log every minute.

Client IP: 10.101.254.5 (6509's IP)

Connect Request: IAS_NO_SUCH_USER

Connect Result: Rejected

FQ Username: PHLVRC\azbycx

server IP: 10.101.254.5

Any suggestions of what I should look at to tackle this problem?

[Richard Burts]

John

A good starting place to troubleshoot this issue would be if you would post the complete aaa and radius config of the 6509.

Are you seeing any issues or any messages in the log on the 6509 that may be related?

It might be helpful to run debug radius authentication on the 6509 and post any output from the debug.

HTH

Rick

[meng_ted]

The keep alives packets are sometimes missinterpretted by ACS server so by adding "Set dot1x radius-keeplive disable" the command stops those keep-alive packets.