Ignoring Logged Messages in Radius Live logs for test user

[ShaunGreen]

Hi All,

I have the following commands to test that the ISE-PSN is up and responding. When it drops, then dot1x fails over to the Critical access policy.

radius server xxx-PSN
address ipv4 10.x.x.x auth-port 1812 acct-port 1813
automate-tester username test-user idle-time 1
key 7 xxxxx

That works fine, but the only problem I have is the amount of logs I see in the Radius live logs.

Is there a way to ignore these logs messages, or is there a better way of doing it?

Thanks, Simon

[martin.fischer]

Hi @ShaunGreen 

Yes, on ISE go to Administration -> System -> Logging -> Collection Filters. Add an entry with attribute 'User Name', Value = test-user, Filter Type = Filter All.

[Massimo Baschieri · Accepted solution]

Or you can add the prode-on option, this way the probes are sent only when primary radius fails.

[ShaunGreen]

Hi @Massimo Baschieri ,

Sorry my ISE skills aren't fantastic, I'm still building my knowledge up, could you please provide a few more details with regard to adding the probe-on option?

[martin.fischer · Accepted solution]

Hi @ShaunGreen 

For the command 'automate-tester username test-user idle-time 1' you can use the probe-on instead of idle-time.

If you use idle-time then the probes will be sent regularly in the defined interval independent of the server state (UP/DEAD). If you use the probe-on keyword instead, then the probes will only be sent if IOS recognized the server as DEAD.

Check the following document and search for 'Automate-tester Probe-on' for more details:

https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/whitepaper_C11-731907.html