Monitoring And Troubleshooting Coa Functionality - Cisco Catalyst 4500 Series Configuration Manual

Chapter 44 Configuring 802.1X Port-Based Authentication
To disable AAA, use the no aaa new-model global configuration command. To disable the AAA server
functionality on the switch, use the no aaa server radius dynamic authorization global configuration
command:
Switch(config)# aaa server radius dynamic-author
Switch(config-locsvr-da-radius)# client ip addr vrf vrfname
Switch(config-locsvr-da-radius)# server-key cisco123
Switch(config-locsvr-da-radius)# port 3799
Note Default port for packet of disconnect is 1700. Port 3799 is required to interoperate with ACS 5.1.
Switch(config)# authentication command bounce-port ignore

Monitoring and Troubleshooting CoA Functionality

The following Cisco IOS commands can be used to monitor and troubleshoot CoA functionality on the
switch:
•
•
•
•
•
•
Configuring RADIUS Server Load Balancing
This feature allows access and authentication requests to be evenly across all RADIUS servers in a server
group. For more information, see the RADIUS Server Load Balancing chapter of the Cisco IOS Security
Configuration Guide, Release 12.2:
http://www.ciscosystems.com/en/US/docs/ios/12_2sb/feature/guide/sbrdldbl.html
Displaying the RADIUS Configuration
To display the RADIUS configuration, use the show running-config privileged EXEC command.
Displaying 802.1X Statistics and Status
To display 802.1X statistics for all interfaces, use the show dot1x all statistics privileged EXEC
command.
To display the 802.1X administrative and operational status for the switch, use the
show dot1x all details privileged EXEC command. To display the 802.1X administrative and
operational status for a specific interface, use the show dot1x interface details privileged EXEC
command.
OL-25340-01
debug radius
debug aaa coa
debug aaa pod
debug aaa subsys
debug cmdhd [detail | error | events]
show aaa attributes protocol radius
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Displaying 802.1X Statistics and Status
44-113