topic Re: AAA on Nexus 4.27d and RSA Radius Server in Network Access Control

AAA on Nexus 4.27d and RSA Radius Server

jg — Mon, 11 Mar 2019 00:59:38 GMT

I can authenticate between our MDS 9216i switch and RSA radius server

but my role does not come across. The logged in user is a network-operator not admin.

In the AV Pair i have defined shell:role*network-admin but it doesnt seem to come across

Any ideas?

Re: AAA on Nexus 4.27d and RSA Radius Server

Javier Henderson — Fri, 15 Apr 2011 15:45:13 GMT

It should be shell:roles*"network-admin" (ie, roles, not role)

Re: AAA on Nexus 4.27d and RSA Radius Server

jg — Fri, 15 Apr 2011 16:58:27 GMT

That was a type on my part, it is

shell:roles*"network-admin"

Re: AAA on Nexus 4.27d and RSA Radius Server

Javier Henderson — Fri, 15 Apr 2011 17:04:02 GMT

In that case, looking at the packet traffic between the switch and the RADIUS server would be useful.

Also, can you post your switch configuration (the AAA relevant parts)?

Re: AAA on Nexus 4.27d and RSA Radius Server

jg — Fri, 15 Apr 2011 17:09:47 GMT

Here are the relevant statements

radius-server timeout 30
radius-server retransmit 2
radius-server deadtime 1
radius-server host 172.16.0.64 key 7 "uoe_cehn!0" auth-port 1645 acct-port 1646
authentication accounting
radius-server host 10.16.0.64 key 7 "uoe_cehn!0" auth-port 1645 acct-port 1646 a
uthentication accounting
aaa group server radius radius
aaa group server radius securid
aaa authentication login default group securid

aaa group server radius radius

aaa group server radius securid

server 172.16.0.64

server 10.16.0.64