topic ACS 5.3 - 11033 Selected Service type is not Network Access in Network Access Control

ACS 5.3 - 11033 Selected Service type is not Network Access

johnnylingo — Mon, 11 Mar 2019 03:19:12 GMT

I have some older devices on the network that only support RADIUS (not TACACS) for authentication and would like to have them use SecureACS 5.3

I understand that by default, ACS only supports TACACS for device administration. So I'll get this error when trying RADIUS:

11033 Selected Service type is not Network Access

Description:

RADIUS requests can only be processed by Access Services that are of type Network Access

Resolution Text:

Verify that the Service Selection Policy rules are correct

However, even after adjusting the Service Selection rules and seeing hits, I still see the same message in the logs, as if it has no affect. Any Ideas?

ACS 5.3 - 11033 Selected Service type is not Network Access

Amjad Abdullah — Wed, 17 Apr 2013 06:09:09 GMT

If you use the protocol as radius you can not use a device admin service. You can only use network access. That will allow you for authentication to the devices.

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"

ACS 5.3 - 11033 Selected Service type is not Network Access

johnnylingo — Mon, 29 Jul 2013 17:54:30 GMT

That's correct, thanks. I went to "Default Network Access" -> "Identity" and creating a custom rule for the devices I want to administer via RADIUS. I found setting the "NAS-Identifier" field was very useful.

ACS 5.3 - 11033 Selected Service type is not Network Access

Amjad Abdullah — Mon, 05 Aug 2013 11:28:14 GMT

Glad that your isue is now resolved.

Rating useful replies is more useful than saying "Thank you"