topic Mgmt Authentication to ISW switches via Control in ExtremeControl

Mgmt Authentication to ISW switches via Control

ivancica — Sun, 24 Apr 2022 08:15:36 GMT

I'm looking for radius attributes required to login as a administrator on a ISW switch via Control

I was going to pass back the following attributes to Control, but not sure what values to put into CUSTOM3 value?

Tunnel-Private-Group-Id=%VLAN_ID%:%VLAN_TUNNEL_TAG%
Tunnel-Type=13:%VLAN_TUNNEL_TAG%
Tunnel-Medium-Type=6:%VLAN_TUNNEL_TAG%
Cisco-AVPair=%CUSTOM3%

Any help get these Switches authenticating/authorizing would be appreciated.. 😉

Got the info I needed from another post:

shell:priv-lvl=15

Thx

Re: Mgmt Authentication to ISW switches via Control

Miguel-Angel_RO — Mon, 25 Apr 2022 09:19:06 GMT

Hi ivancica,

This is what I'm using:
Cisco-AVPair=shell:priv-lvl=%MGMT_SERV_TYPE%
Tunnel-Medium-Type=6
Tunnel-Type=13
Tunnel-Private-Group-Id=%VLAN_ID%

Mig

Re: Mgmt Authentication to ISW switches via Control

AidanB — Thu, 07 Jul 2022 09:59:49 GMT

When using RADIUS-based command authorization on an AOS switch, the list of commands that the user is authorized to run are supplied at authentication time.