Cisco Acs 57 User Guide

5   
Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
—AAA Audit
—AAA Diagnostics
—System Diagnostics
—AAA Accounting
—Administrative and Operational Audit
Include system logs—Check the check box to include system logs, then click All or Recent and enter a value from 1 
to 999 in the file(s) field.
You can enter a description in the Description field, if you need.
4.Click:
Download to download the support bundle with the options you specified. The support...

6
Troubleshooting ACS with the Monitoring and Report Viewer
 
Working with Expert Troubleshooter
Connectivity Tests, page 1
ACS Support Bundle, page 1
Expert Troubleshooter, page 2
Troubleshooting RADIUS Authentications
Use the RADIUS Authentication diagnostic tool to troubleshoot issues with RADIUS authentications. To do this, you must:
1.Choose Monitoring and Reports > Troubleshooting > Expert Troubleshooter.
The Expert Troubleshooter page appears.
2.Select RADIUS Authentication Troubleshooting from...

7   
Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
4.Click Search to display the RADIUS authentications that match your search criteria.
The Search Result table is populated with the results of your search. The following fields appear in the table: Time, 
Status, Username, MAC Address, Audit Session ID, Network Device IP, Failure Reason, and Access Service.
5.Choose the RADIUS authentication record from this table that you want to troubleshoot, and click...

8
Troubleshooting ACS with the Monitoring and Report Viewer
 
Working with Expert Troubleshooter
The Progress Details page appears. This page provides a summary and might prompt you for additional input, if 
required. If the Monitoring and Report Viewer requires additional input, you must click the Click User Input Required 
button. A dialog box appears.
Modify the fields in the dialog box as described in Table 5 on page 8 and click Submit.
8.Click Done to return to the Expert Troubleshooter.
The...

9   
Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
10.Click Done to return to the Expert Troubleshooter.
The Monitoring and Report Viewer provides you the diagnosis, steps to resolve the problem, and troubleshooting 
summary to help you resolve the problem.
Note: You can launch the RADIUS authentication troubleshooter from the RADIUS authentication report pages as well. 
You must drill down to the details page of a particular RADIUS authentication to launch...

10
Troubleshooting ACS with the Monitoring and Report Viewer
 
Working with Expert Troubleshooter
The Progress Details page appears. The Monitoring and Report Viewer prompts you for additional input. 
4.Click the User Input Required button and modify the fields as described in Table 5 on page 8.
5.Click Submit to run the show command on the network device and view the output.
Related Topics
Available Diagnostic and Troubleshooting Tools, page 1
Connectivity Tests, page 1
ACS Support Bundle, page 1...

11   
Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
4.Click the User Input Required button and modify the fields as described in Table 5 on page 8.
The Troubleshooting Progress Details page appears. The Expert Troubleshooter retrieves the CLI response from the 
network device. A new window appears and prompts you to select the interfaces for which you want to analyze the 
interface configuration.
5.Check the check boxes the interfaces that you want to...

12
Troubleshooting ACS with the Monitoring and Report Viewer
 
Working with Expert Troubleshooter
7.Click Show Results Summary to view the diagnosis and resolution steps.
The Results Summary page appears with the information described in Table 6 on page 9.
Related Topics
Available Diagnostic and Troubleshooting Tools, page 1
Connectivity Tests, page 1
ACS Support Bundle, page 1
Expert Troubleshooter, page 2
Comparing the SXP-IP Mappings Between a Device and its Peers
Security Group Access devices...

13   
Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
8.Check the check box of the peer SXP devices for which you want to compare the SXP mappings and enter the 
Common Connection Parameters as described in Table 9 on page 13.
9.Click Submit.
The Progress Details page appears with a brief summary of the results.
10.Click Show Results Summary to view the diagnosis and resolution steps. 
The Results Summary page appears with the information described in Table 6...

14
Troubleshooting ACS with the Monitoring and Report Viewer
 
Working with Expert Troubleshooter
Comparing IP-SGT Pairs on a Device with ACS-Assigned SGT Records
For Security Group Access-enabled devices, ACS assigns each user an SGT value through RADIUS authentication. The 
IP User SGT diagnostic tool connects to the network device whose IP address you provide and does the following:
1.Obtains a list of all IP-SGT assignments on the network device.
2.Checks the RADIUS authentication and accounting...