show network-access aaa radius-servers

Profile

Name of the profile associated with the RADIUS server. A RADIUS server can be associated with more than one profile.

Server address

IPv4 or IPv6 address of the RADIUS server.

Authentication port

RADIUS server authentication port number.

Preauthentication port

RADIUS server preauthentication port number.

Accounting port

RADIUS server accounting port number.

Accounting retry

Number of times the router retransmits RADIUS accounting messages when no response is received from the server.

Accounting timeout

Period the local router waits to receive a response from a RADIUS accounting server before retransmitting the message.

Status

RADIUS server status, UP (Alive), UNREACHABLE, or DOWN (DEAD).

If status is DOWN, the Status field includes the number of seconds configured by the revert-interval statement. The router does not send requests to servers in the DOWN state, but does send requests to servers with a status of either UP or UNREACHABLE.

This field also displays the status of AAA accounting suspension or resumption, and the status of baselining of accounting statistics if you suspended or resumed accounting operations or initiated the generation of a baseline. This information is applicable only for RADIUS servers that are in the UP state.

RADIUS servers

Details for specific RADIUS server, identified by IP address.

Authentication requests

Number of authentication requests received by the authentication server.

Authentication rollover requests

Number of requests coming into the server as a result of the previous server timing out.

Authentication retransmissions

Number of retransmissions.

Accepts

Number of authentication requests accepted by the authentication server.

Rejects

Number of authentication requests rejected by the authentication server.

Challenges

Number of authentication requests challenged by the authentication server.

Authentication malformed responses

Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one).

Authentication bad authenticators

Number of responses in which the authenticator is incorrect for the authentication request. This can occur if the RADIUS secrets for the client and server do not match.

Authentication requests pending

Number of authentication requests waiting for a response.

Authentication request timeouts

Number of times an authentication request to the server timed out.

Authentication unknown responses

Number of unknown responses. The RADIUS response type in the header is invalid or unsupported.

Authentication packets dropped

Number of packets dropped because they are too short or because the router receives a response for which there is no corresponding request.

Preauthentication requests

Number of preauthentication requests received by the preauthentication server.

Preauthentication rollover requests

Number of preauthentication requests coming into the server as a result of the previous server timing out.

Preauthentication retransmissions

Number of retransmissions of preauthentication requests.

Preauthentication Accepts

Number of preauthentication requests accepted by the preauthentication server.

Preauthentication Rejects

Number of preauthentication requests rejected by the preauthentication server.

Preauthentication Challenges

Number of preauthentication requests challenged by the preauthentication server.

Preauthentication malformed responses

Number of responses to preauthentication requests with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one).

Preauthentication bad authenticators

Number of responses in which the authenticator is incorrect for the preauthentication request. This can occur if the RADIUS secrets for the client and server do not match.

Preauthentication requests pending

Number of preauthentication requests waiting for a response.

Preauthentication request timeouts

Number of times a preauthentication request to the server timed out.

Preuthentication unknown responses

Number of unknown responses during the preauthentication phase. The RADIUS response type in the header is invalid or unsupported.

Preauthentication packets dropped

Number of preauthentication packets dropped because they are too short or because the router receives a response for which there is no corresponding request.

Accounting start requests

Number of accounting start requests received.

Accounting interim requests

Number of accounting interim requests received.

Accounting stop requests

Number of accounting stop requests received.

Accounting rollover requests

Number of requests coming into the server as a result of the previous server timing out.

Accounting retransmissions

Number of retransmissions.

Accounting start responses

Number of accounting start responses sent by the server.

Accounting interim responses

Number of accounting interim responses sent by the server.

Accounting stop responses

Number of accounting stop responses sent by the server.

Accounting malformed responses

Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one).

Accounting bad authenticators

Number of responses in which the authenticator is incorrect for the accounting request. This can occur if the RADIUS secrets for the client and server do not match.

Accounting requests pending

Number of accounting requests waiting for a response.

Accounting request timeouts

Number of accounting requests to the accounting server that timed out.

Accounting unknown responses

Number of unknown responses. The RADIUS response type in the header is invalid or unsupported.

Accounting packets dropped

Number of packets dropped because they are too short or because the router receives a response for which there is no corresponding request.