[RADIATOR] Cisco NX-OS TACACS+ problems

Caporossi, Steve G. capoross at musc.edu
Mon Oct 21 15:23:42 CDT 2013



Steve
843.876.5083
Sent from my mobile device please excuse brevity and grammar.

> On Oct 21, 2013, at 3:43 PM, "Heikki Vatiainen" <hvn at open.com.au> wrote:
> 
>> On 10/18/2013 03:04 PM, Caporossi, Steve G. wrote:
>> I have the host entries defined on the Nexus gear.
>> ip host radserver1.musc.edu <server address>
>> ip host radserver2.musc.edu <server address>
>> ip host radserver3.musc.edu <server address>
>> 
>> RADIUS servers *are* defined by IP address however the Nexus gears tries to resolve the hostname(s)
> 
> Hmm, just to clarify, you have configured hostname mappings for RADIUS
> servers (ip host ...) as above, but do you mean you are using IP
> addresses or names with 'radius-server host ...'?

Correct

IP addresses with radius-server host 

> What I'm thinking is that is it known that radius server name lookup
> uses the static name to ip definitions?

No 
> The cisco docs do not say if all
> name lookups use the local definitions.
> 
> I do not if it does or not, since I have usually seen and used 'no ip
> domain-lookup' when working with IOS. I guess this is not an option at
> this point? Maybe in a lab?
> 

I will disable domain-lookup and see if that resolves the issue

> Thanks,
> Heikki
> 
> -- 
> Heikki Vatiainen <hvn at open.com.au>
> 
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
> DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
> NetWare etc.
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator


More information about the radiator mailing list