show network-access aaa radius-servers
Syntax
show network-access aaa radius-servers
<detail>
Description
Display RADIUS server status and information.
Options
detail |
(Optional) Display detailed level of information. |
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show network-access aaa
radius-servers
command. Output fields are listed in the approximate order in
which they appear.
Field Name |
Field Description |
Level of Output |
---|---|---|
|
Name of the profile associated with the RADIUS server. A RADIUS server can be associated with more than one profile. |
All levels |
|
IPv4 or IPv6 address of the RADIUS server. |
All levels |
|
RADIUS server authentication port number. |
All levels |
|
RADIUS server preauthentication port number. |
All levels |
|
RADIUS server accounting port number. |
All levels |
|
Number of times the router retransmits RADIUS accounting messages when no response is received from the server. |
Detail |
|
Period the local router waits to receive a response from a RADIUS accounting server before retransmitting the message. |
Detail |
|
RADIUS server status, If status is This
field also displays the status of AAA accounting suspension or resumption, and the
status of baselining of accounting statistics if you suspended or resumed
accounting operations or initiated the generation of a baseline. This information
is applicable only for RADIUS servers that are in the Note:
After requests to a server or set of servers time out after 10 seconds, the status of the servers changes. The following guidelines apply to server status:
|
All levels |
|
Details for specific RADIUS server, identified by IP address. |
Detail |
|
Number of authentication requests received by the authentication server. |
Detail |
|
Number of requests coming into the server as a result of the previous server timing out. |
Detail |
|
Number of retransmissions. |
Detail |
|
Number of authentication requests accepted by the authentication server. |
Detail |
|
Number of authentication requests rejected by the authentication server. |
Detail |
|
Number of authentication requests challenged by the authentication server. |
Detail |
|
Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one). |
Detail |
|
Number of responses in which the authenticator is incorrect for the authentication request. This can occur if the RADIUS secrets for the client and server do not match. |
Detail |
|
Number of authentication requests waiting for a response. |
Detail |
|
Number of times an authentication request to the server timed out. |
Detail |
|
Number of unknown responses. The RADIUS response type in the header is invalid or unsupported. |
Detail |
|
Number of packets dropped because they are too short or because the router receives a response for which there is no corresponding request. |
Detail |
|
Number of preauthentication requests received by the preauthentication server. |
Detail |
|
Number of preauthentication requests coming into the server as a result of the previous server timing out. |
Detail |
|
Number of retransmissions of preauthentication requests. |
Detail |
|
Number of preauthentication requests accepted by the preauthentication server. |
Detail |
|
Number of preauthentication requests rejected by the preauthentication server. |
Detail |
|
Number of preauthentication requests challenged by the preauthentication server. |
Detail |
|
Number of responses to preauthentication requests with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one). |
Detail |
|
Number of responses in which the authenticator is incorrect for the preauthentication request. This can occur if the RADIUS secrets for the client and server do not match. |
Detail |
|
Number of preauthentication requests waiting for a response. |
Detail |
|
Number of times a preauthentication request to the server timed out. |
Detail |
|
Number of unknown responses during the preauthentication phase. The RADIUS response type in the header is invalid or unsupported. |
Detail |
|
Number of preauthentication packets dropped because they are too short or because the router receives a response for which there is no corresponding request. |
Detail |
|
Number of accounting start requests received. |
Detail |
|
Number of accounting interim requests received. |
Detail |
|
Number of accounting stop requests received. |
Detail |
|
Number of requests coming into the server as a result of the previous server timing out. |
Detail |
|
Number of retransmissions. |
Detail |
|
Number of accounting start responses sent by the server. |
Detail |
|
Number of accounting interim responses sent by the server. |
Detail |
|
Number of accounting stop responses sent by the server. |
Detail |
|
Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one). |
Detail |
|
Number of responses in which the authenticator is incorrect for the accounting request. This can occur if the RADIUS secrets for the client and server do not match. |
Detail |
|
Number of accounting requests waiting for a response. |
Detail |
|
Number of accounting requests to the accounting server that timed out. |
Detail |
|
Number of unknown responses. The RADIUS response type in the header is invalid or unsupported. |
Detail |
|
Number of packets dropped because they are too short or because the router receives a response for which there is no corresponding request. |
Detail |
Sample Output
- show network-access aaa radius-servers
- show network-access aaa radius-servers
- show network-access aaa radius-servers detail
show network-access aaa radius-servers
user@host> show network-access aaa radius-servers Profile: xyz-profile1 Server address: 192.168.30.188 Authentication port: 1645 Preauthentication port: 1810 Accounting port: 1646 Status: UP Profile: xyz-profile2 Server address: 192.168.30.190 Authentication port: 1812 Preauthentication port: 1810 Accounting port: 1813 Status: DOWN ( 60 seconds ) Profile: xyz-profile11 Server address: 2001:DB8:0:f101::2 Authentication port: 1645 Preauthentication port: 1810 Accounting port: 1646 Status: UP
show network-access aaa radius-servers
user@host> show network-access aaa radius-servers Profile: xyz-profile3 Server address: 192.168.30.188 Authentication port: 1645 Preauthentication port: 1810 Accounting port: 1646 Status: UNREACHABLE Profile: xyz-profile3 Server address: 192.168.30.190 Authentication port: 1812 Accounting port: 1813 Preauthentication port: 1810 Status: UNREACHABLE
show network-access aaa radius-servers detail
user@host> show network-access aaa radius-servers detail Profile: xyz_profile5 Server address: 192.168.30.188 Authentication port: 1812 Preauthentication port: 1810 Accounting port: 1813 Status: UP (accounting suspended, baseline in progress) Server address: 192.168.30.190 Authentication port: 1812 Preauthentication port: 1810 Accounting port: 1813 Accounting retry: 5 Accounting port: 60 Status: UP (accounting suspended, baseline in progress) Server address: 192.168.30.192 Authentication port: 1812 Preauthentication port: 1810 Accounting port: 1813 Status: UP Server address: 192.168.30.190 Authentication port: 1812 Accounting port: 1813 Accounting retry: 5 Accounting port: 60 Status: UP Server address: 192.168.30.192 Authentication port: 1812 Accounting port: 1813 Status: UP RADIUS Servers 192.168.30.188 Authentication requests: 7658 Authentication rollover requests: 0 Authentication retransmissions: 3600 Accepts: 6458 Rejects: 0 Challenges: 0 Authentication malformed responses: 0 Authentication bad authenticators: 0 Authentication requests pending: 0 Authentication request timeouts: 4800 Authentication unknown responses: 0 Authentication packets dropped: 0 Preauthentication requests: 7658 Preauthentication rollover requests: 0 Preauthentication retransmissions: 3600 Preauthentication Accepts: 6458 Preauthentication Rejects: 0 Preauthentication Challenges: 0 Preauthentication malformed responses: 0 Preauthentication bad authenticators: 0 Preauthentication requests pending: 0 Preauthentication request timeouts: 4800 Preauthentication unknown responses: 0 Preauthentication packets dropped: 0 Accounting start requests: 1 Accounting interim requests: 1 Accounting stop requests: 0 Accounting rollover requests: 0 Accounting retransmissions: 0 Accounting start responses: 1 Accounting interim responses: 1 Accounting stop responses: 0 Accounting malformed responses: 0 Accounting bad authenticators: 0 Accounting requests pending: 0 Accounting request timeouts: 0 Accounting unknown responses: 0 Accounting packets dropped: 0