Extreme C5210, cannot get RADIUS controller logon to work to save my life

[Steve_Ballantyn]

I am attempting to do something really simple. That is, get RADIUS off the ground. I figured the easiest starting task would be to use it for controller management logons, but even this has proved impossible.

Now I am in a situation where RADIUS on my Windows 2008 R2 server is logging a success "Network Policy Server granted full access to a user because the host met the defined health policy" and yet my Extreme controller is denying the logon.

When I run a Wireshark, I can see the ACCESS-REQUEST and ACCESS-ACCEPT messages being exchanged.

So why isn't my Extreme controller happy with this outcome?

SOME PICTURES:

[Doug]

You need to return back Service-Type=Administrative

[Jeremy_Gibbs]

Doug, you beat me to it!

[Doug]

I'm going to add the Adminstrative option to the article. The Enterasys policy string might be confusing if you... A. Don't know what Enterasys is or means B. Don't use Policy Manager

[Ronald_Dvorak]

https://gtacknowledge.extremenetworks.com/articles/How_To/How-do-I-configure-RADIUS-Management-login...

not sure whether that one could save lifes 