VOP Radius Auth for Cisco 3560 switch

[dwu]

try to configure VOP radius server auth for Cisco 3560 switch. Radius server v4.0 is using 1812 as auth port, when I enable aaa on cisco 3560, it deafult the radius source port to 1644-1645, I was unable to change it... I put radius-server host, auth port 1812, it still seems not 'talking' to radius server.

anyone has idea? Thanks in adv.

[Georg Pauwen]

Hello,

the command:

radius-server host x.x.x.x auth-port 1812 acct-port 1813 timeout 3

should normally make communication over these ports, 1812 and 1813, possible.

You might want to try and configure:

radius-server vsa send

in order to enable the switch to recognize vendor specific attributes.

Or try:

radius-server host x.x.x.x non-standard

in order for the switch to recognize a vendor-proprietary implementation of RADIUS.

You could also check if port 1812 is blocked somewhere in the path from the client to the RADIUS server. An easy way to do this is to issue a:

telnet x.x.x.x 1812

from a client machine, where x.x.x.x is the IP address of the RADIUS server. If the port is not blocked, you should get an 'open'...

HTH,

GP