Cisco M10-RM Software Manual page 212

Configuring a Local Authenticator
Username
nicky
jones
jsmith
Router#sh radius local-server statistics
Successes
Client blocks
Unknown NAS
NAS : 100.0.0.53
Successes
Client blocks
Corrupted packet
No username attribute
Shared key mismatch
Unknown EAP message
Username
clients_aaa
The first section of statistics lists cumulative statistics from the local authenticator.
The second section lists stats for each access point (NAS) authorized to use the local authenticator. The
EAP-FAST statistics in this section include these stats:
Auto provision success—the number of PACs generated automatically
•
Auto provision failure—the number of PACs not generated because of an invalid handshake packet
•
or invalid username or password
PAC refresh—the number of PACs renewed by clients
•
Invalid PAC received—the number of PACs received that were expired, that the authenticator could
•
not decrypt, or that were assigned to a client username not in the authenticator's database
The thirdsecond section lists stats for individual users. If a user is blocked and the lockout time is set to
infinite, blocked appears at the end of the stat line for that user. If the lockout time is not infinite,
Unblocked in x seconds appears at the end of the stat line for that user.
Use this privileged exec mode command to reset local authenticator statistics to zero:
AP# clear radius local-server statistics
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
9-10
Chapter 9
Successes Failures
0 0
0 0
0 0
: 1 Unknown usernames
: 0 Invalid passwords
: 0 Invalid packet from NAS: 0
: 1 Unknown usernames
: 0 Invalid passwords
: 0 Unknown RADIUS message : 0
: 0 Missing auth attribute : 0
: 0 Invalid state attribute: 0
: 0 Unknown EAP auth type
Successes Failures
1
Configuring an Access Point as a Local Authenticator
Blocks
0
0
0
: 0
: 0
: 0
: 0
: 0
Blocks
0 0
OL-14209-01