14-6
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter14 Troubleshooting ACS with the Monitoring and Report Viewer
Working with Expert Troubleshooter
Working with Expert Troubleshooter
The following sections describe how to use the Expert Troubleshooter diagn ostic tools:
•Troubleshooting RADIUS Authentications, page 14-6
•Executing the Show Command on a Network Device, page 14-10
•Evaluating the Configuration of a Network Device, page 14-10
•Comparing SGACL Policy Between a Network Device and ACS, page 14-12
•Comparing the SXP-IP Mappings Between a Device and its Peers, page14-12
•Comparing IP-SGT Pairs on a Device with ACS-Assigned SGT Records, page14-15
•Comparing Device SGT with ACS-Assigned Device SGT, page 14-16
Related Topics
•Available Diagnostic and Troubleshooting Tools, page14-1
•Connectivity Tests, page14-1
•ACS Support Bundle, page14-1
•Expert Troubleshooter, page 14-2

Troubleshooting RADIUS Authentications

Use the RADIUS Authentication diagnostic tool to troubleshoot issues with RADIUS authentications.
To do this, you must:
Step1 Choose Monitoring and Reports > Troubleshooting > Expert Troubleshooter.
The Expert Troubleshooter page appears.
Step2 Select RADIUS Authentication Troubleshooting from the list of tro ubleshooting tools.
The RADIUS Authentication Troubleshooter page appears.
Step3 Modify the fields as shown in Table 14 -4 to filter the RADIUS authentications that you want to
troubleshoot.
Table14-4 RADIUS Authentication Troubleshooter Page
Option Description
Search and select a RADIUS authentication for troubleshooting
Username Enter the username of the user whose authentication you want to troublesh oot, or click
Select to choose the username from a list. Click Clear to clear the username.
MAC Address Enter the MAC address of the device that you want to troubleshoot, or click Select to
choose the MAC address from a list. Click Clear to clear the MAC address.
Audit Session ID Enter the audit session ID that you want to troubleshoot. Click Clear to clear the audit
session ID.
NAS IP Enter the NAS IP address or click Select to choose the NAS IP address from a list.
Click Clear to clear the NAS IP address.