Nexus 5010 AAA Radius Authentication Issue

Posted on 2010-11-12
Last Modified: 2012-05-10
I am able to ping the radius server 172.20.xx.10 from the vrf managment interface which is on a different subnet.  However when I try to autheticate I simply get AAA servers unreachable. Please look at code and advise. I have a 2008 r2 server with NPS running for the Radius and all my other switches are working fine off of it. Been scratching my head on this one. Thanks. --Rob.

STP-C5010-01# sh run
version 4.1(3)N2(1)
no feature telnet
no telnet server enable
feature interface-vlan

role name default-role
  description This is a system defined role and applies to all users.
  rule 5 permit show feature environment
  rule 4 permit show feature hardware
  rule 3 permit show feature module
  rule 2 permit show feature snmp
  rule 1 permit show feature system
username admin password 5 $1$7e6okdrX$HKYXI6FbU5RyLZRpgpUr.0  role network-admi
ssh key rsa 2048
ip host STP-C5010-01
radius-server host 172.20.xx.10 key 7 "xxx" authentication account
aaa group server radius useRadius
    server 172.20.xx.10
    use-vrf management
switchname STP-C5010-01
snmp-server user admin network-admin auth md5 0x0372c0bb76f8b6b8ab016ee85049e11
 priv 0x0372c0bb76f8b6b8ab016ee85049e11b localizedkey
snmp-server host 172.20.xx.238 traps version 1 xxx ntp server 132.148.x.253 use-vrf management
aaa authentication login default group useRadius
aaa authentication login error-enable
radius-server directed-request

vrf context management
  ip route
vlan 1,68

interface Vlan1

interface Vlan68
  no shutdown
  ip address 172.20.xx.10/24

interface Ethernet1/1
  speed 1000

interface Ethernet1/2

interface Ethernet1/3

interface Ethernet1/4

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7

interface Ethernet1/8
  switchport access vlan 68
  speed 1000

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface mgmt0
  vrf member management
  ip address 172.20.xx.1/24
clock timezone CST -6 0
line console
boot kickstart bootflash:/n5000-uk9-kickstart.4.1.3.N2.1.bin
boot system bootflash:/n5000-uk9.4.1.3.N2.1.bin
ip route 172.20.xx.250

Open in new window

Question by:rclaxton1
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment

Accepted Solution

rclaxton1 earned 0 total points
ID: 34125714
I again answered my own question. After looking at the logs in the NPS server I'm getting authentication errors and the nexus device is communicating w/ config above, However the error message "unable to communicate with AAA servers on the Nexus is just...false. Maybe this is fixed in a later code version in Nexus but put me in a four hour problem-solving detour. Please close this question. --Rob.

Featured Post

Schedule a Tour of the ATEN booth at InfoComm 2017

Tour the ATEN booth to see the the Latest Addition to the Modular Matrix Switch Series, New 4K HDMI Over IP Extender and more! Enter ATEN's Ultimate Giveaway Sweepstakes for a chance to win one of several great prizes, including an ATEN US7220 2-Port Thunderbolt 2 Sharing Switch!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

689 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question