This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

G3 Switch If SACL's are configured it is not possible to login to switch with radius account

G3 Switch If SACL's are configured it is not possible to login to switch with radius account

Rainer_Adam
New Contributor III

‎01-20-2016 08:35 AM


If SACL's are configured it is not possible to login to switch with radius account.

If you configure a SACL that contains a service, it is NOT possible to login to the switch with your radius users anymore, only local users are able to login like "admin".

Firmware on this G3 is: 06.61.15.0003
Radius login credentials are on the NAC Gateways.

0 Kudos
8 REPLIES 8

Ronald_Dvorak
Honored Contributor

‎01-21-2016 07:48 AM

You've only allowed "service snmp" and not all traffic from this source as per your config.

0 Kudos

Rainer_Adam
New Contributor III
In response to Ronald_Dvorak

‎01-21-2016 07:48 AM

Oh my god, yes, thats it!
0 Kudos

Rainer_Adam
New Contributor III

‎01-21-2016 07:41 AM

10.1.1.250 and 10.2.1.250 in this case are the ip addresses from the NAC gateway. If I unterstood it correct my config will allow all the traffic from 10.1.1.250 and 10.2.1.250, right?

0 Kudos

Matthew_Hum1
Extreme Employee

‎01-21-2016 07:32 AM

Yes, you need to either allow everything from the NAC Gateway or also allow RADIUS (port 1812) from theNAC Gateways.
try adding this:
set system service-acl sacl permit ip-source port 1812
0 Kudos
GTM-P2G8KFN