Access Security Guide K/KA/KB.15.15

Table 11 Values for show radius host output
DefinitionTerm
The time interval between the most recent Accounting-Response and the
Accounting-Request that matched it from this RADIUS accounting server.
Round Trip Time
The number of RADIUS Accounting-Request packets sent to this server that have not
yet timed out or received a response. This variable is incremented when an
Pending Requests
accounting-Request is sent and decremented due to receipt of an Accounting-Response,
a timeout or a retransmission.
The number of RADIUS Accounting-Request packets retransmitted to this RADIUS
accounting server. Retransmissions include retries where the Identifier and Acct-Delay
have been updated, as well as those in which they remain the same.
Retransmissions
The number of accounting timeouts to this server. After a timeout the client may retry
to the same server, send to a different server, or give up. A retry to the same server
Timeouts
is counted as a retransmit as well as a timeout. A send to a different server is counted
as an Accounting-Request as well as a timeout.
The number of malformed RADIUS Accounting-Response packets received from this
server. Malformed packets include packets with an invalid length. Bad authenticators
and unknown types are not included as malformed accounting responses.
Malformed Responses
The number of RADIUS Accounting-Response packets which contained invalid
authenticators received from this server.
Bad Authenticators
The number of RADIUS packets of unknown type which were received from this server
on the accounting port.
Unknown Types
The number of RADIUS packets which were received from this server on the accounting
port and dropped for some other reason.
Packets Dropped
The number of RADIUS Access-Requests the switch has sent since it was last rebooted.
(Does not include retransmissions.)
Access Requests
The number of RADIUS Accounting-Request packets sent. This does not include
retransmissions.
Accounting Requests
The number of RADIUS Access-Challenge packets (valid or invalid) received from this
server.
Access Challenges
The number of RADIUS Access-Accept packets (valid or invalid) received from this
server.
Access Accepts
The number of RADIUS Access-Reject packets (valid or invalid) received from this
server.
Access Rejects
The number of RADIUS packets received on the accounting port from this server.Responses
Viewing RADIUS authentication statistics
Syntax:
show authentication
Displays the primary and secondary authentication methods configured for the
Console, Telnet, Port-Access (802.1X), and SSH methods of accessing the switch.
Also displays the number of access attempts currently allowed in a session.
show radius authentication
Displays NAS identifier and data on the configured RADIUS server and the switch
interactions with this server. Requires prior use of the radius-server host
command to configure a RADIUS server IP address in the switch, see “Accounting
services” (page 185).
Viewing 171