topic Radius dynamic author commands in Network Access Control

Radius dynamic author commands

dgaikwad — Mon, 29 Jul 2019 07:58:20 GMT

Hi Experts,

I have been going through the various commands for dynamic-author in in aaa server radius.
There are these three commands that pop out and have some questions:
no port
no auth-type any
no ignore session-key
no ignore server-key

In what scenario is this applicable?
I went through some of the documentation, but they do not talk much about these, what would be the real use of these commands in a real world scenario.

Re: Radius dynamic author commands

Damien Miller — Mon, 29 Jul 2019 15:52:35 GMT

I have never used any variation of the sub commands while leveraging ISE, just the client command with key.

The only one I see a potential use for is the port number. The RFC that covers CoA actually states to use UDP 3799, while Cisco standardized on UDP 1700. Other radius solutions such as Clearpass leverage the RFC port number requiring you to change the switchs UDP 1700 default, or adjust it on the server.