- Cisco Secure Access Control System 5.4 Manual

14-6
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter 14 Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
Working with Expert Troubleshooter
The following sections describe how to use the Expert Troubleshooter diagnostic tools:
• Troubleshooting RADIUS Authentications, page 14-6
• Executing the Show Command on a Network Device, page 14-10
• Evaluating the Configuration of a Network Device, page 14-10
• Comparing SGACL Policy Between a Network Device and ACS, page 14-12
• Comparing the SXP-IP Mappings Between a Device and its Peers, page 14-12
• Comparing IP-SGT Pairs on a Device with ACS-Assigned SGT Records, page 14-15
• Comparing Device SGT with ACS-Assigned Device SGT, page 14-16
Related Topics
• Available Diagnostic and Troubleshooting Tools, page 14-1
• Connectivity Tests, page 14-1
• ACS Support Bundle, page 14-1
• Expert Troubleshooter, page 14-2
Troubleshooting RADIUS Authentications
Use the RADIUS Authentication diagnostic tool to troubleshoot issues with RADIUS authentications.
To do this, you must:
Step 1 Choose Monitoring and Reports > Troubleshooting > Expert Troubleshooter.
The Expert Troubleshooter page appears.
Step 2 Select RADIUS Authentication Troubleshooting from the list of troubleshooting tools.
The RADIUS Authentication Troubleshooter page appears.
Step 3 Modify the fields as shown in Table 14-4 to filter the RADIUS authentications that you want to
troubleshoot.
Table 14-4 RADIUS Authentication Troubleshooter Page
Option Description
Search and select a RADIUS authentication for troubleshooting
Username Enter the username of the user whose authentication you want to troubleshoot, or click
Select to choose the username from a list. Click Clear to clear the username.
MAC Address Enter the MAC address of the device that you want to troubleshoot, or click Select to
choose the MAC address from a list. Click Clear to clear the MAC address.
Audit Session ID Enter the audit session ID that you want to troubleshoot. Click Clear to clear the audit
session ID.
NAS IP Enter the NAS IP address or click Select to choose the NAS IP address from a list.
Click Clear to clear the NAS IP address.