10-29-2020 06:26 PM
Hi.
I am configuring a B3G124-48 switch to authenticate via Radius.
The server is already authenticating other Datacom and Mikrotik switches, however Enterasys does not authenticate.
B3(su)->show radius
RADIUS status: Enabled
RADIUS retries: 10
RADIUS timeout: 5 seconds
RADIUS attribute mgmt password: standard
RADIUS Server IP Address Auth-Port Realm-Type IPsec
-------------- ---------- --------- ----------------- --------
1 192.168.0.1 1812 management-access disabled
B3(su)->show radius accounting
RADIUS accounting status: Enabled
RADIUS Acct Server IP Address Acct-Port Retries Timeout Status
------------------ -------------- --------- ------- ------- --------
1 192.168.0.1 1813 10 5 Enabled
Thanks
10-31-2020 09:18 PM
Hello Rafael,
the filter-id is not necessary.
What do you see in events (Type: Access Control Engine)?
Your wrote “switch reports that it was not possilbe...”, do you see this in the log?
Please post the log part.
Regards
Stephan
10-31-2020 02:04 PM
Thanks for answering.
I am using RADIUS for managment auth, I did exactly as is the document you sent me. I just didn't configure the filter-id, but apparently, it was to allow logon even without this configuration, correct?
Using the RADIUS debug, it returns ok LDAP authentication, as well as Service-Type = Administrative-User, however the switch reports that it was not possible to authenticate.
10-30-2020 09:51 AM
Hello Rafael,
what are you trying to achieve? Mgmt authentication or port authentication.
Here is a good example for Managment auth:
And here for Port auth. with further links:
If both did not help post your config please.
Regards
Stephan