topic Re: Radius not working Enterasys B3 in ExtremeSwitching (Other)

Radius not working Enterasys B3

RafaelSilva — Fri, 30 Oct 2020 01:26:06 GMT

Hi.

I am configuring a B3G124-48 switch to authenticate via Radius.
The server is already authenticating other Datacom and Mikrotik switches, however Enterasys does not authenticate.

B3(su)->show radius 
 RADIUS status:    Enabled 
 RADIUS retries:   10   
 RADIUS timeout:   5 seconds
 RADIUS attribute mgmt password:  standard
 RADIUS Server     IP Address      Auth-Port  Realm-Type          IPsec   
 --------------    ----------      ---------  -----------------   --------
 1                 192.168.0.1     1812     management-access   disabled

B3(su)->show radius accounting 
 RADIUS accounting status:      Enabled
 RADIUS Acct Server  IP Address      Acct-Port  Retries  Timeout  Status
 ------------------  --------------  ---------  -------  -------  --------
 1                   192.168.0.1     1813       10       5        Enabled

Thanks

Re: Radius not working Enterasys B3

StephanH — Fri, 30 Oct 2020 16:51:15 GMT

Hello Rafael,

what are you trying to achieve? Mgmt authentication or port authentication.

Here is a good example for Managment auth:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-RADIUS-on-SecureStacks-for-switch-user-login

And here for Port auth. with further links:

https://community.extremenetworks.com/faqs-90303/sample-securestack-configuration-for-802-1x-eap-rfc3580-and-mua-5613316

If both did not help post your config please.

Regards

Stephan

Re: Radius not working Enterasys B3

RafaelSilva — Sat, 31 Oct 2020 21:04:49 GMT

Thanks for answering.

I am using RADIUS for managment auth, I did exactly as is the document you sent me. I just didn't configure the filter-id, but apparently, it was to allow logon even without this configuration, correct?

Using the RADIUS debug, it returns ok LDAP authentication, as well as Service-Type = Administrative-User, however the switch reports that it was not possible to authenticate.

Re: Radius not working Enterasys B3

StephanH — Sun, 01 Nov 2020 04:18:30 GMT

Hello Rafael,

the filter-id is not necessary.

What do you see in events (Type: Access Control Engine)?

Your wrote “switch reports that it was not possilbe...”, do you see this in the log?

Please post the log part.

Regards

Stephan