topic Oh, and yes ISE supports any in Network Access Control

CIsco ISE with HP and Fortigate

nimmi.phasil — Mon, 11 Mar 2019 06:41:57 GMT

Hi ,

I have configured HP switches 5820X and 5130 for AAA radius authentication with Cisco ISE 2.0.0.306 .

The switch receives successful authorization reply ; but unable to login . What would be the advanced attributes for Radius Authorization profile in

ISE ?

Also , does ISE support Fotigate firewalls ?

According to the link, HP

jan.nielsen — Fri, 22 Apr 2016 12:28:35 GMT

According to the link, HP expects a role to be returned as a Cisco-AVPair, you should try adding that to your authorization profile :

Cisco-avpiar = shell:roles=”network-admin”

https://abouthpnetworking.com/2014/03/16/comware7-radius-based-rbac-user-role-assignment/

Oh, and yes ISE supports any

jan.nielsen — Fri, 22 Apr 2016 12:29:40 GMT

Oh, and yes ISE supports any device that uses rfc compliant radius, it's usually only a matter of finding out what av-pairs to send back to that specific device, there is not really any standard for that.

Hi Jan,

nimmi.phasil — Fri, 22 Apr 2016 13:04:33 GMT

Hi Jan,

Tried

Cisco:cisco-av-pair shell:roles=network-admin

Radius:Service-Type Administrative/Login/NAS Prompt

HP:HP-Privilege-Level 3

The server sends authorization successful messages with all combinations ; switch receives the message.

But login failed message is shown.

Did your put network-admin in

jan.nielsen — Fri, 22 Apr 2016 13:28:23 GMT

Did your put network-admin in quotes?

Tried with quotes

nimmi.phasil — Fri, 22 Apr 2016 14:14:55 GMT

Tried with quotes

Did you read the link i

jan.nielsen — Fri, 22 Apr 2016 14:22:43 GMT

Did you read the link i attached earlier, is your config on your swith setup like that, with both authentication and accounting configured ? maybe have a read through the comments on the link i sent you, to see what other people have had problems with. I'm pretty sure it's on the switch you need to find your problem. Oh, and actually i don't think you need the quotes

Hi Jan,

nimmi.phasil — Mon, 25 Apr 2016 09:24:55 GMT

Hi Jan,

The issue is resolved when accounting is configured.

Thank You !

Nimmi,

Scott Parish — Wed, 18 May 2016 14:49:15 GMT

Nimmi,

Did you ever get ISE and Fortigate working together?

Scott

so your using cisco av-pair

Jeffrey Jones — Thu, 22 Dec 2016 19:56:01 GMT

so your using cisco av-pair with HP switches?

Re: CIsco ISE with HP and Fortigate

sajid231088 — Sat, 26 May 2018 09:45:29 GMT

Could you please share HP switch configuration.

I tried to do it but couldn't het any success.