Debug commands for IOS AP Authentication


There are a log of debugging commands and here are some commands that are usefull when debugging authentication on an IOS AP.

Yeah I know it’s a copy paste from a document, but it’s very usefull for me to have it on my blog.. 😉

These debugs are the most helpful for EAP authentications:
debug radius authentication—The outputs of this debug start with this word: RADIUS.
debug dot11 aaa authenticator process—The outputs of this debug start with this text: dot11_auth_dot1x_.
debug dot11 aaa authenticator state-machine—The outputs of this debug start with this text: dot11_auth_dot1x_run_rfsm.

These debugs are the most helpful for MAC authentication:
debug radius authentication—When an external authentication server is used, the outputs of this debug start with this word: RADIUS.
debug dot11 aaa authenticator mac-authen—The outputs of this debug start with this text: dot11_auth_dot1x_.
These debugs are the most helpful for WPA negotiations:
debug dot11 aaa authenticator process—The outputs of this debug start with this text: dot11_auth_dot1x_.
debug dot11 aaa authenticator state-machine—The outputs of this debug start with this text: dot11_auth_dot1x_run_rfsm.

These debugs are the most helpful for administrative authentication:
debug radius authentication or debug tacacs authentication—The outputs of this debug start with one of these words: RADIUS or TACACS.
debug aaa authentication—The outputs of this debugs start with this text: AAA/AUTHEN.
debug aaa authorization—The outputs of this debugs start with this text: AAA/AUTHOR.

Tags: , ,

About Joost van der Made

Me

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: