cancel
Showing results for 
Search instead for 
Did you mean: 

Extreme C5210, cannot get RADIUS controller logon to work to save my life

Extreme C5210, cannot get RADIUS controller logon to work to save my life

Steve_Ballantyn
Contributor
I am attempting to do something really simple. That is, get RADIUS off the ground. I figured the easiest starting task would be to use it for controller management logons, but even this has proved impossible.

Now I am in a situation where RADIUS on my Windows 2008 R2 server is logging a success "Network Policy Server granted full access to a user because the host met the defined health policy" and yet my Extreme controller is denying the logon.

When I run a Wireshark, I can see the ACCESS-REQUEST and ACCESS-ACCEPT messages being exchanged.

So why isn't my Extreme controller happy with this outcome?

SOME PICTURES:

15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96321-9384n4-evtlog_inline.png



15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-83998-1pxctgz-wireshark_inline.png



15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-39372-1rzrbpx-radius1_inline.png



15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96096-gnn97v-radius2_inline.png



15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-15963-b1s71i-radius3_inline.png



8 REPLIES 8

Doug
Extreme Employee
You need to return back Service-Type=Administrative
Doug Hyde
Director, Technical Support / Extreme Networks

Doug, you beat me to it!

Doug
Extreme Employee
I'm going to add the Adminstrative option to the article. The Enterasys policy string might be confusing if you... A. Don't know what Enterasys is or means B. Don't use Policy Manager
Doug Hyde
Director, Technical Support / Extreme Networks

Ronald_Dvorak
Honored Contributor
GTM-P2G8KFN