show radius servers

This command displays the summary and details of RADIUS authenticating servers configured for the RADIUS client.

Format show radius servers {ipaddress | ipv6addr | dnsname} | name [servername]}
Mode Privileged EXEC
Parameter Description
Command Variables
ipaddress The IP address of the authenticating server.
ipv6addr The IPv6 address of the server.
dnsname The DNS name of the authenticating server.
servername The alias name to identify the server.
Command Output Fields
Current The * symbol preceding the server host address specifies that the server is currently active.
Host Address The IP address of the host.
Server Name The name of the authenticating server.
Port The port used for communication with the authenticating server.
Type Specifies whether this server is a primary or secondary type.
Current Host Address (*) An asterisk (*) indicates which configured RADIUS host is the currently active authenticating server.
Number of Retransmits The configured value of the maximum number of times a request packet is retransmitted.
Dead Time The amount of time to skip a RADIUS server that is not responding to authentication requests.
Timeout Duration The configured timeout value, in seconds, for request retransmissions.
RADIUS Server VSA Authentication Indicates whether the system processes Cisco dynamic ACL vendor-specific attributes sent by RADIUS Server.
Server State The administrative state of the RADIUS server.
Server Immortal State Indicates whether the server is an immortal |RADIUS server, which is a dead server that is marked as alive after being determined to be dead because it is the last server known to be alive
Test User The name of the configured RAIDUS server test user.
Idle Time The number of minutes between RADIUS server test probes,
RADIUS Accounting Mode A global parameter to indicate whether the accounting mode for all the servers is enabled or not.
RADIUS Attribute 4 Mode A global parameter to indicate whether the NAS-IP-Address attribute has been enabled to use in RADIUS requests.
RADIUS Attribute 4 Value A global parameter that specifies the IP address to be used in NAS-IP-Address attribute used in RADIUS requests.
RADIUS Attribute 95 Mode A global parameter to indicate whether the NAS-IPv6-Address attribute has been enabled to use in RADIUS requests.
RADIUS Attribute 95 Value A global parameter that specifies the IPv6 address to be used in the NAS-IPv6-Address attribute to be used in RADIUS requests.
RADIUS Attribute 30 MAC Format The format in which the MAC address is sent to the RADIUS server in attribute 30.
RADIUS Attribute 31 MAC Format The format in which the MAC address is sent to the RADIUS server in attribute 31 Calling-Station- ID).
RADIUS Attribute 32 MAC Format The format in which the MAC address is sent to the RADIUS server in attribute 32 NAS-Identifier).
RADIUS Attribute 32 include in access request Indicates whether RADIUS attribute 32 is sent to the RADIUS server in access-request and accounting-request messages.
RADIUS Attribute 32 format The format for RADIUS attribute 32, which is one or more of the following:
  • %m: MAC address
  • %i: IP address
  • %h: Host Name
  • %d: Domain Name.
RADIUS Attribute 44 include in access request Indicates whether RADIUS attribute 44 is sent to the RADIUS server in access-request and accounting-request messages.
Link local interface If configured, the link local IPv6 address.
Secret Configured Yes or No Boolean value that indicates whether this server is configured with a secret.
Message Authenticator A global parameter to indicate whether the Message Authenticator attribute is enabled or disabled.
CoA Bounce-Host-Port Indicates whether RADIUS server Bounce-Port messages will be processed (Accept) or ignored.
Number of CoA Requests Received The number of RADIUS Change of Authorization (CoA) requests messages received from a RADIUS host.
Number of CoA ACK Responses Sent The number of RADIUS CoA acknowledgments the client has sent.
Number of CoA NAK Responses Sent The number of RADIUS CoA non-acknowledgments the client has sent.
Number of CoA Requests Ignored The number of RADIUS CoA requests the client has ignored.
Number of CoA Missing/ Unsupported Attribute R The number of RADIUS CoA requests the client has received that have a missing or unsupported attribute value.
Number of CoA Session Context Not Found Request The number of RADIUS CoA requests the client has received in which the session context identified in the CoA-Request or not exist on the NAS.
Number of CoA Invalid Attribute Value Request The number of RADIUS CoA requests the client has received that have an invalid attribute value.
Number of Administratively Prohibited Request The number of RADIUS CoA requests the client has received that where the NAS is configured to prohibit honoring of CoA-Request or Disconnect- Request packets for the specified session.
Number of Dead servers in Named Server Group When the name servername options are used, this field shows the number of RADIUS servers in the named server group that are determined to be dead.

Example: The following shows example CLI display output for the command.

(Switch) #show radius servers
Cur Host Address Server Name Port Type
rent
---- ------------------------ --------------------------------- ----- ----------
* 192.168.37.200 Network1_RADIUS_Server 1813 Primary
192.168.37.201 Network2_RADIUS_Server 1813 Secondary
192.168.37.202 Network3_RADIUS_Server 1813 Primary
192.168.37.203 Network4_RADIUS_Server 1813 Secondary
(Switch) #show radius servers name
Current Host Address Server Name Type
------------------------ --------------------------------- ----------192.168.37.200
Network1_RADIUS_Server Secondary
192.168.37.201 Network2_RADIUS_Server Primary
192.168.37.202 Network3_RADIUS_Server Secondary
192.168.37.203 Network4_RADIUS_Server Primary
(Switch) #show radius servers 2.2.2.2
RADIUS Server Name............................. Default-RADIUS-Server
Current Server IP Address...................... 2.2.2.2
Number of Retransmits.......................... 4
Timeout Duration............................... 5
RADIUS Server VSA Authentication............... Enable
Server State................................... Up
Server Immortal State.......................... False
Load Balance................................... Disable
Test User......................................
Idle Time...................................... 60
RADIUS Accounting Mode......................... Disable
RADIUS Attribute 4 Mode........................ Disable
RADIUS Attribute 4 Value....................... 0.0.0.0
RADIUS Attribute 30 Mac Format................. legacy lower-case
RADIUS Attribute 31 Mac Format................. legacy lower-case
RADIUS Attribute 32 Mac Format................. legacy lower-case
RADIUS Attribute 32 include in access request.. Disable
RADIUS Attribute 32 format..................... %m
RADIUS Attribute 44 include in access request.. Disable
Port........................................... 1812
Type........................................... Secondary
Secret Configured.............................. Yes
Message Authenticator.......................... Enable
CoA Bounce-Host-Port........................... Accept
CoA Disable-Host-Port.......................... Accept
Number of CoA Requests Received................ 0
Number of CoA ACK Responses Sent............... 0
Number of CoA NAK Responses Sent............... 0
Number of CoA Requests Ignored................. 0
Number of CoA Missing/Unsupported Attribute R.. 0
Number of CoA Session Context Not Found Reque.. 0
Number of CoA Invalid Attribute Value Request.. 0
Number of Administratively Prohibited Request.. 0

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo