The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The RADIUS: Separate Retransmit Counter for Accounting feature allows users to configure an exponential backoff retransmit. That is, after the normally configured retransmission retries have been used, the router will keep on trying with an interval that doubles on each retransmission failure until a configured maximum interval is reached. This functionality allows users to retransmit accounting requests for many hours without overloading the RADIUS server when it does come back up.
Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the Feature Information Table at the end of this document.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
The following tasks will result in excessive memory consumption on the router:
In many environments, a single RADIUS server is used for authentication and accounting. Whenever this server is down for approximately 24 hours, the accounting records of users already on the router are lost after authentication, authorization, and accounting (AAA) does all the retransmissions. Before the introduction of this feature, the retransmissions could be configured for a maximum of 100 retries and the timeout could be configured for 1,000 seconds. Although these configurations keep the accounting records on the router for 24 hours, a timeout of 1,000 seconds is unreasonable, causing problems when the RADIUS server cannot be reached due to network congestion.
The RADIUS: Separate Retransmit Counter for Accounting feature allows users to configure an exponential backoff retransmit. That is, after the normally configured retransmission retries have been used, the router will keep on trying with an interval that doubles on each retransmission failure until a configured maximum interval is reached. This functionality allows users to retransmit accounting requests for many hours without overloading the RADIUS server when it does come back up.
This feature can be configured globally (via the radius-server backoff exponential command), per server (via the radius-server host command), or per group (via the backoff exponential command).
With this feature, users can extend the time in which the RADIUS client (the router) sends accounting requests to the RADIUS server in the event that the RADIUS server or the connection to the server is down and there is no accounting response confirmation. This functionality enables accounting records to remain on the router for up to 24 hours.
To configure exponential backoffs of RADIUS retransmits over an extended period of time on a global basis and per RADIUS host, perform the following steps:
Command or Action | Purpose | |
---|---|---|
|
Example: Router> enable |
Enters privileged EXEC mode. Enter your password if prompted. |
|
Example: Router# configure terminal |
Enters global configuration mode. |
|
Example: Router (config)# radius-server backoff exponential max-delay 60 backoff-retry 32 |
Configures the router for exponential backoff retransmit of accounting requests. |
|
Example: Router (config)# radius-server host 192.0.2.1 test username test1 auth-port 1645 acct-port 1646 |
Specifies a RADIUS server host and configures that RADIUS server host for exponential backoff retransmit of accounting requests. |
To configure exponential backoffs of RADIUS retransmits over an extended period of time per RADIUS server group, perform the following steps:
To verify feature functionality, use any of the following EXEC commands:
This section provides the following configuration examples:
The following example shows how to configure your router for exponential backoff retransmit of accounting requests. In this example, an exponential backoff is configured globally (via the radius-server backoff exponential command) and for the RADIUS server host "172.107.164.206" (via the radius-server host command).
aaa new-model aaa authentication login default group radius aaa authentication ppp default group radius aaa authorization exec default group radius aaa authorization network default group radius aaa accounting send stop-record authentication failure aaa accounting update periodic 1 aaa accounting network default start-stop group radius ! radius-server host 172.107.164.206 auth-port 1645 acct-port 1646 backoff exponential max-delay 60 backoff-retry 32 radius-server backoff exponential max-delay 60 backoff-retry 32 radius-server retransmit 3 radius-server key rad123 end
The following example shows how to enable exponential backoff retransmits on a per-server basis. In this example, assume that the retransmit is configured for 3 retries and the timeout is configured for 5 seconds; that is, the RADIUS request will be transmitted 3 times with a delay of 5 seconds. Thereafter, the router will continue to retransmit RADIUS requests with a delayed interval that doubles each time until 32 retries have been achieved. The router will stop doubling the retransmit intervals after the interval surpasses the configured 60 minutes; it will transmit every 60 minutes.
radius-server host foo.xyz.com backoff exponential max-delay 60 backoff-retry 32
After enabling this command, the retransmits will be sent as follows ("t" equals seconds):
t = 0 req sent t = 5 retrans 1 t = 10 retrans 2 t = 15 retrans 3 t = 25 retrans 4 t = 45 retrans 5 t = 85 retrans 6 t = 165 retrans 7 t = 325 retrans 8 t = 645 retrans 9 t = 1285 retrans 10 t= 2565 retrans 11 t = 5125 retrans 12 t = 8725 retrans 13 (The interval has stabilized to 60 minutes here). t = 12325 retrans 14 till retransmit 35
After all the retransmits are sent, the RADIUS request follows the same path that it would when all the normal retransmits are done.
The following sections provide references related to the RADIUS: Separate Retransmit Counter for Accounting.
Standard |
Title |
---|---|
No new or modified standards are supported by this feature, and support for existing standards has not been modified by this feature. |
-- |
MIB |
MIBs Link |
---|---|
No new or modified MIBs are supported by this feature, and support for existing MIBs has not been modified by this feature. |
To locate and download MIBs for selected platforms, Cisco IOS XE software releases, and feature sets, use Cisco MIB Locator found at the following URL: |
RFC |
Title |
---|---|
No new or modified RFCs are supported by this feature, and support for existing RFCs has not been modified by this feature. |
-- |
Description |
Link |
---|---|
The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. |
The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
Table 1 | Feature Information for RADIUS: Separate Retransmit Counter for Accounting |
Feature Name |
Releases |
Feature Information |
---|---|---|
RADIUS: Separate Retransmit Counter for Accounting |
Cisco IOS XE Release 2.1 |
The RADIUS: Separate Retransmit Counter for Accounting feature allows users to configure an exponential backoff retransmit. That is, after the normally configured retransmission retries have been used, the router will keep on trying with an interval that doubles on each retransmission failure until a configured maximum interval is reached. This functionality allows users to retransmit accounting requests for many hours without overloading the RADIUS server when it does come back up. In Cisco IOS XE Release 2.1, this feature was introduced on the Cisco ASR 1000 Series Aggregation Services Routers. The following commands were introduced or modified: backoff exponential, radius-server host, radius-server backoff exponential. |
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.