Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

dwu
New Member

VOP Radius Auth for Cisco 3560 switch

try to configure VOP radius server auth for Cisco 3560 switch. Radius server v4.0 is using 1812 as auth port, when I enable aaa on cisco 3560, it deafult the radius source port to 1644-1645, I was unable to change it... I put radius-server host, auth port 1812, it still seems not 'talking' to radius server.

anyone has idea? Thanks in adv.

1 REPLY
VIP Purple

Re: VOP Radius Auth for Cisco 3560 switch

Hello,

the command:

radius-server host x.x.x.x auth-port 1812 acct-port 1813 timeout 3

should normally make communication over these ports, 1812 and 1813, possible.

You might want to try and configure:

radius-server vsa send

in order to enable the switch to recognize vendor specific attributes.

Or try:

radius-server host x.x.x.x non-standard

in order for the switch to recognize a vendor-proprietary implementation of RADIUS.

You could also check if port 1812 is blocked somewhere in the path from the client to the RADIUS server. An easy way to do this is to issue a:

telnet x.x.x.x 1812

from a client machine, where x.x.x.x is the IP address of the RADIUS server. If the port is not blocked, you should get an 'open'...

HTH,

GP

242
Views
0
Helpful
1
Replies