topic Re: failed to privilege mode when authenticated by radius server in Network Access Control

failed to privilege mode when authenticated by radius server

aalonzo93 — Sun, 10 Mar 2019 22:21:31 GMT

hi,

I tried to authenticate and authorized Nokia/checkpoint Nortel/AD3 and Nortel 5510 platform using an 4.1 for windows ACS. the ACCESS-REQUEST is well processed bi the radius server wich send ACCESS-ACCEPT to the AAA Client (ie NORTEL or NOKIA), but i'have got privilege access denied on the Client side.

RADIUS IETF Dictionnary is used for every device.

all others Cisco Devices authenticate and are well authorized.

I didn't found any documentation about this item.

best regards

Alain

Re: failed to privilege mode when authenticated by radius server

rochopra — Tue, 28 Aug 2007 15:29:04 GMT

Hi,

You need to configure proper parameters in ACS based on the device requirement which you can get from the vendor.

To add Vendor Specific Attribute in ACS based on the dictionary file specified by vendor, you need to create an INI file and upload it to windows using following command:

CSUtil.exe -addUDV slot-number filename

Following link can give you more information on the same:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/A_CSUtil.html#wp365540

~Rohit

Re: failed to privilege mode when authenticated by radius server

aalonzo93 — Mon, 03 Sep 2007 13:34:30 GMT

Hi,

The vendor specified wich AVpair is needed for Alteon Devices, "administrative" value for number 6 IETF AVpair is required, so this is working fine now.

best regards

Alain

Re: failed to privilege mode when authenticated by radius server

yunchouljung — Sun, 28 Aug 2011 02:40:07 GMT

hello, alain

I read the your post on CISCO COMMUNITY SUPPORT.

can you send me a VSA Dictionary file for Alteon Devices.

my e-mail address is ycjung@ringnet.co.kr

thanks in advance

YUN CHOUL JUNG