show radius dyn-authorization client

Syntax

show radius dyn-authorization client <IP-ADDR> [vrf <VRF-NAME>]

Description

Shows RADIUS dynamic authorization statistics for the specified client on the specified VRF.

Command context

Operator (>) or Manager (#)

Parameters

client <IP-ADDR>

Specifies the client IPv4 or IPv6 address.

vrf <VRF-NAME>

Specifies the VRF on which the identified client is connected. When omitted, VRF default is assumed.

Authority

Operators or Administrators or local user group members with execution rights for this command. Operators can execute this command from the operator context (>) only.

Usage

Show command output item identification:
  • Total Requests: The number of Disconnect and CoA (change of authorization) requests received from the DAC (dynamic authorization client).

  • Authorize Only Requests: The number of Disconnect and CoA requests received from the DAC with an "Authorize only" Service-Type attribute.

  • Malformed Requests: The number of malformed Disconnect and CoA requests received from the DAC.

  • Bad Authenticator Requests: The number of Disconnect and CoA requests received from this DAC with an invalid authenticator field.

  • Dropped Requests: The number of Disconnect and CoA requests from this DAC that have been silently discarded for reasons other than malformed, bad authenticators, or unknown type.

  • Total ACK Responses: The number of Disconnect-ACKs sent to the DAC.

  • Total NAK Responses: The number of Disconnect-NAKs sent to the DAC.

  • Session Not Found Responses: The number of Disconnect-NAKs sent to the DAC because no session context could be found.

  • User Sessions Modified: The number of user sessions for which authorization changed due to Disconnect and CoA requests received from the DAC.

Example

Showing RADIUS dynamic authorization statistics for client 1.1.2.1 on VRF default:

switch# show radius dyn-authorization client 1.1.2.1 vrf default
Status and Counters - RADIUS Dynamic Authorization Client Information

  VRF Name                 : default
  Authorization Client     : 1.1.2.1
  Unknown Packets          : 55
  Message-Type                   Disconnect       CoA
  ---------------------------------------------------------------
  Total Requests                 2147483647       10
  Authorize Only Requests        10               10
  Malformed Requests             10               10
  Bad Authenticator Requests     2147483647       2147483647
  Dropped Requests               10               10
  Total ACK Responses            10               10
  Total NAK Responses            10               10
  Session Not Found Responses    10               10
  User Sessions Modified         20               20