Monitoring and maintaining aaa pod server – Cisco 10000 User Manual
Page 361
16-59
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Chapter 16 Configuring RADIUS Features
RADIUS Packet of Disconnect
Monitoring and Maintaining AAA POD Server
To monitor an AAA POD server and troubleshoot problems:
•
Ensure that the POD port is configured correctly in both the router (using aaa pod server command)
and the RADIUS server. Both should be the same.
•
Ensure that the shared-secret key configured in the router (using aaa pod server command) and in
the AAA server are the same.
•
Use debug commands:
–
debug aaa pod—displays debug messages for POD packets
–
debug aaa authentication—displays debug messages for authentication
–
debug aaa accounting—displays debug messages for accounting records
–
debug radius—displays debug messages for RADIUS packets
The following example shows output from the debug aaa pod command and indicates a successful
POD request.
Router# debug aaa pod
AAA POD packet processing debugging is on
General OS:
AAA POD packet processing debugging is on
Router#
4d18h: ++++++ POD Attribute List ++++++
4d18h: 6291C598 0 00000009 username(336) 8 pod_user
4d18h: 7085EE1C 0 00000001 nas-ip-address(439) 4 23.3.7.3
4d18h:
4d18h: POD: 2.0.0.210 user pod_user 0.0.0.0 sessid 0x0 key 0x0
4d18h: POD: Line User IDB Session Id Key
4d18h: POD: Skip <NULL> 0.0.0.0 0x363 0x0
4d18h: POD: KILL Virtual- pod_user 104.1.2.38 0x421A 0xD4105397
4d18h: POD: Skip Virtual- <NULL> 0.0.0.0 0x421B 0x0
4d18h: POD: Sending ACK from port 3799 to 2.0.0.210/64917
Caution
Because debugging output is assigned high priority in the CPU process, it can render the system
unusable. For this reason, use debug commands only to troubleshoot specific problems or during
troubleshooting sessions with Cisco Systems technical support personnel. Moreover, it is best to use
debug commands during periods of lower network traffic and fewer users. Debugging during these
periods decreases the likelihood that increased debug command processing overhead will affect system
use.
Configuration Example for RADIUS Packet of Disconnect
provides a configuration example for a router performing as an AAA POD server:
Example 16-3 Configuring a Router as an AAA POD Server
Router(config)# aaa pod server server-key xyz123