05-31-2023 02:23 AM
hi,
I want to configure radius client on extreme switch,
below command i used for configuration
configure radius netlogin primary server 192.168.X.X 1812 client-ip 192.168.x.x vr VR-Default
configure radius netlogin primary shared-secret enrypted
enable radius
but when i am looking for radius statistics switch not senting any request to the server.
05-31-2023 05:44 AM
if you want to authenticate CLI logins you need to configure radius mgt-access instead of netlogin.
05-31-2023 05:39 AM
This is what I'm using to authenticate Clients (NAC) against an Aruba Clearpass and assign a VLAN depending on the radius response:
configure radius netlogin primary server x.x.x.x 1812 client-ip x.x.x.x vr VR-Default
configure radius netlogin primary shared-secret encrypted "XXXX"
configure radius dynamic-authorization 1 server x.x.x.x client-ip x.x.x.x vr VR-Default shared-secret encrypted "XXXX"
enable radius
disable radius mgmt-access
enable radius netlogin
enable radius dynamic-authorization
Ports that should authenticate connected clients need to have netlogin enabled:
enable netlogin port X dot1x mac
06-04-2023 12:36 AM
enable radius dynamic-authorization
enable netlogin port X dot1x mac.
These two commands are not supporting in the switch