Catalyst 3550 and IAS authorization
in [Cisco]
|
Prev: Uninstall VPN Client 4.6
Next: Ip Route to NULL0?
From: Merv on 31 Mar 2006 09:40 You could also try configuring ip radius source-interface <vlan that IAS server is on> to see if that makes nay difference
From: Merv on 31 Mar 2006 09:48 Also the image you are using 12.1(8)EA1c is quite dated. Suggest upgrading to a new image like 12.1(22)EA7
From: S?awek on 31 Mar 2006 10:12 U?ytkownik "Merv" <merv.hrabi(a)rogers.com> napisa? w wiadomo?ci news:1143815827.215464.139510(a)u72g2000cwu.googlegroups.com... > The authentication failed becuase the switch did not get a response. > > Put a sniffer (Ethereal) between the switch and the IAS server to > confirm that this is the case. You should see a packet go out to the > IAS server and then see no reply packet. > If that is the case then the problem is on the IAS server > > RADIUS uses UDP port 1812 by default ( or the port configured in teh > IOS config) > > Does the IAS server have a default gateway configured ? > IAS Server has default gateway and if I try login just from IAS Server it always has success. And I was wondering, why I can login from my host after I login from host which is in the same VLAN as IAS Server? Maybe ip radius source-interface command should help... Now I set this command and see if it helps. But to check it out, I need some time.
From: S?awek on 31 Mar 2006 10:14 U?ytkownik "Merv" <merv.hrabi(a)rogers.com> napisa? w wiadomo?ci news:1143816518.337386.102150(a)e56g2000cwe.googlegroups.com... > Also the image you are using 12.1(8)EA1c is quite dated. > > Suggest upgrading to a new image like 12.1(22)EA7 > I realize, that my IOS is pretty old. But I have to buy Cisco contract for new software and I don't know if my boss give me money for this...
From: Merv on 31 Mar 2006 10:37
1. can you post santized config 2. post output of extended ping using a) the source-interface of the vlan that the ISA server is on b) the source-interface of the problem vlan |