Testing AAA Configuration

Testing AAA Configuration

Troubleshooting AAA can be rather comple—because it’s used so often with other features, such as PPP—so remembering to use the troubleshooting commands associated with any protocols or technologies working with AAA is important. This section looks at some common commands for confirming AAA configuration and activity.

When working with AAA in a specific environment, such as dial-up modems, ISDN, or PPP, don’t overlook Cisco’s web site for more information. Go to http://www.cisco.com on the Web and perform a search for AAA or ISDN AAA. No CCO account is needed for much of the information.

The show Commands

Two show commands useful in debugging AAA are

show running-config

To verify that local AAA is configured correctly

show tacacs

To verify network connectivity between NAS and AAA server

The debug Commands

Cisco IOS debug command output provides a valuable source of information and feedback concerning state transitions and functions within the AAA environment. In addition to debug command output gathered directly from devices running Cisco IOS, the Cisco AAA server can be configured to collect operational diagnostics. Use the following debug commands to capture AAA-related transitions and functions:

debug condition user username

Sets conditional debugging for a specific user and generates output debugs related to the user

debug aaa authentication

Displays authentication information with TACACS+ and RADIUS client/server interaction

debug aaa authorization

Displays authorization information with TACACS+ and RADIUS client/server interaction

debug aaa accounting

Displays accounting information with TACACS+ and RADIUS client/server interaction

debug tacacs

Displays TACACS+ interaction between the IOS client and the AAA server

debug radius

Displays RADIUS interaction between the IOS client and the AAA server

debug ppp negotiation

Shows if a client is passing PPP negotiation

debug ppp authentication

Shows if a client is passing PPP authentication

debug ppp error

Displays protocol errors and error statistics associated with PPP connection negotiation and operation




Part III: Virtual Private Networks (VPNs)