What RADIUS attribute to send is needed when adding a Cisco ASA to the NAC appliance for AAA Mangement Access?

[Pierre_Demassey]

I am trying to add a Cisco ASA to the NAC appliance for RADIUS Management Access. I started by enabling SNMP between the ASA and NetSight Console. But in order to add the ASA to the NAC appliance, I need to specify a RADIUS attribute to send. What do I need to put?

[StephanH]

Hello Pierre,

as Radius attribute you need only the Service-Type like:

Service-Type=%CUSTOM2%

Corresponding I set the Accept Policy to 6 in Custom 2. Please be aware of the setting in the Management Attributes field. You need this settings to get access via GUI and SSH to your ASA.

As far as I found out you can not distinguish the privilege level!

Best regards
Stephan