Version 33.2.1 adds support for a keep alive message on the Netlogin RADIUS server. This checks for RADIUS server reachability in order to limit unnecessary re-authentication.
All platforms.
The following new commands support this feature:
configure radius netlogin keep-alive
configure radius netlogin keep-alive interval
# show radius RADIUS Default State: disabled RADIUS Default Timeout: 3 seconds RADIUS Algorithm: standard RADIUS Retries: 3 RADIUS port bounce VSA: off RADIUS dynamic-authorization: disabled RADIUS TLS TCP Timeout: default RADIUS TLS OCSP: off RADIUS TLS OCSP Attributes: Nonce : off Signer ocsp-nocheck : off Override Server URL : none Switch Management RADIUS: disabled * Switch Management RADIUS server connect time out: 3 seconds * Switch Management RADIUS Accounting: disabled * Switch Management RADIUS Accounting server connect time out: 3 seconds Netlogin RADIUS: enabled Netlogin RADIUS server connect time out: 3 seconds * Netlogin RADIUS server keep alive: on Netlogin RADIUS server keep alive interval: 60 seconds Netlogin RADIUS server's last known reachability status: unreachable Netlogin RADIUS Accounting: disabled * Netlogin RADIUS Accounting server connect time out: 3 seconds Primary Netlogin RADIUS server: Status is Active host name : IP address : 1.2.3.4 Server IP Port: 1812 Protocol : UDP Client address: 10.127.2.33 (VR-Mgmt) Retries : 3 * Timeout : 3 * shared secret : #$S4/Mj804b1yid8IYgRCNF2qdlGKD+A== Access Requests : 157 Access Accepts : 0 Access Rejects : 0 Access Challenges : 0 Access Retransmits: 117 Client timeouts : 156 Bad authenticators: 0 Unknown types : 0 Round Trip Time : 0 Legend: An asterisk (*) indicates a global value is in use.