topic Re: Send interface description in Radius Attribute in Network Access Control

Send interface description in Radius Attribute

umahar — Mon, 02 Oct 2017 03:15:51 GMT

Is there any way to send interface description or any other value which can uniquely identify an interface from radius requests ?

eg.

interface f0/0

description AP

I want to send "AP" in any of the radius attributes or Cisco VSAs to ISE.

In other words I want to send an attribute which can be set to an interface via CLI.

Please let me know if anyone can think of any idea.

Re: Send interface description in Radius Attribute

Arne Bier — Mon, 02 Oct 2017 23:38:27 GMT

Not sure if there is a NAD config that would send the interface description, but have you tried interpreting the NAS-Port attribute, using attribute nas-port format in IOS to give you interface naming? Your mileage may vary based on what IOS you're using, and what port type you're using. But worth testing in the lab if you can.

Cisco IOS has a VSA that may also help

radius-server vsa send authentication

aaa nas port extended

Re: Send interface description in Radius Attribute

ITCOMMS — Tue, 03 Oct 2017 09:46:26 GMT

Hi Utkarsh,

When I was testing I enabled RADIUS debugs on the switch and modified various options to see if the description was ever sent and unfortunately it was not.

If you find a way to do it would you mind letting me know?

Likewise if you raise an enhancement request if you give me the reference I will attach my own case to it.

Cheers.

Re: Send interface description in Radius Attribute

Joshua Robertson — Fri, 30 Mar 2018 16:24:53 GMT

I had a similar requirement from a customer (tag certain ports to be treated differently), and I was able to utilize the NAS-Port-Type attribute to send a Port-Type other than Ethernet and filter on the new type being sent for those ports. Not ideal, but may be a usable workaround for you. On the switch port, configure with 'radius attribute nas-port-type <type id>'.

https://www.iana.org/assignments/radius-types/radius-types.xhtml#radius-types-13