topic Hello Folks,The error msg in Network Access Control

parsing vsa:not a cisco vendor id:311 – radius

Muhammed AKYUZ — Mon, 11 Mar 2019 01:36:39 GMT

Hi,

We are getting "parsing vsa:not a cisco vendor id:311 – radius" error logs from Nexus. What is the impact of this log?

Did you ever get some more

Marko Pribanic — Mon, 22 Dec 2014 11:16:08 GMT

Did you ever get some more info on this log message?

Hello Folks,The error msg

Alejandro Zuniga — Tue, 27 Jan 2015 19:52:16 GMT

Hello Folks,

The error msg occurs when a Cisco device receives a Radius VSA that is not cisco. VSA 311 belongs to Microsoft so it might be that you are indeed not using a Cisco radius VSA. The error is not harmful.

https://technet.microsoft.com/en-us/library/cc958030.aspx

RADIUS: Attribute length = 12 (0xC)

RADIUS: Vendor ID = 311 (0x137)<<<<<<<<<<<<<<<<<<<

RADIUS: Vendor string = _

The way to stop seeing the error messages depend on the Cisco device in which you are seeing it, in nexus it is "Logging level user 2".

I hope it helps.

doesn't work for 6.0(2)A4(6),

boekelaar — Wed, 14 Oct 2015 14:40:35 GMT

doesn't work for 6.0(2)A4(6), bug ?

I'm seeing this message

ROBERT HOLMES — Fri, 24 Feb 2017 19:10:55 GMT

I'm seeing this message repeated thousands of times on my Nexus switches as well. I tried turning off the Remote Access Multilink in NPS (as suggested in another thread), but it had no effect.

Is there another way to stop NPS from sending this?

What level of detail is lost if we set logging level user to "2"?

Re: parsing vsa:not a cisco vendor id:311 – radius

lacyk — Wed, 10 Jan 2024 18:05:32 GMT

in nxos 9.3(10) logging was fixed and is ignoring non-cisco attributes

in nxos 10.4(2)F the message is back

something for cisco to work on, as it is common practice to send attributes for more than one vendor if user works on several platforms