On Fri, Jul 13, 2012 at 8:09 PM, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
you have defined the usual bits eg
aaa new-model ! ! aaa authentication dot1x default group radius aaa accounting dot1x default start-stop group radius aaa accounting dot1x system start-stop group radius
and you've got a radius-server entry with your RADIUS IP and some settings... but you are missing something - and i'm sure the switch logs would say so - or at least they would with some debug enabled:
aaa group server radius XXXXXX server xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
replace XXXXX with your RADIUS group name and xxx.xxx.xxx.xxx with IP of your server
alan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks so much Alan for the config posting. I have tried with your config and also changed all my 'aaa' strings to include the radius group 'test' which I renamed things to. Unfortunately there is still no information being propogated to the server??? The server has 4 NICs, only 2 of which are configured and have static IP's. Radius claims to be listening on 'all' ports for the acct and auth. I have rebooted the server and checked for any firewall intervention and all seems good. Issuing 'radius -X' still isn't showing anything :-( I have no idea where the issue lies. If it is a switch issue then I have gone through all the necessary docuementation regarding my switch model: Cisco 3560G with POE: http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/1... http://daemonkeeper.net/638/configure-mac-based-vlan-assignment-with-freerad... http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/configurati... http://www.cisco.com/en/US/tech/tk389/tk814/technologies_configuration_examp... and either the switch simply isn't sending RADIUS information; or the server simply is ignoring the requests or not listening for them???? Radius can't be this hard to get working can it? Regards, Kaya