topic Re: Huawei AAA Radius device administration with cisco ISE in Network Access Control

Huawei AAA Radius device administration with cisco ISE

waqas.suneel — Thu, 10 Aug 2017 08:47:50 GMT

Hello

I was wondering that if its possible to perform authentication, authorization and accounting of Huawei switches using AAA Radius. I have successfully done authentication and authorization using TACACS but I want to implement it using AAA Radius. Any guidance would be appreciated.

Re: Huawei AAA Radius device administration with cisco ISE

Arne Bier — Thu, 10 Aug 2017 23:10:20 GMT

Wouldn't that be something you'd find in a Huawei device configuration guide? ISE will behave like any other Radius server at that point

Re: Huawei AAA Radius device administration with cisco ISE

B. BELHADJ — Fri, 11 Aug 2017 13:36:53 GMT

Hi Suneel Waqas

As said by Arne Bier, you have to search in first time the different attributes to be used by Huawei devices if they don't use RADIUS IETF RFC2856 attributes.

From ISE side you have to configure the following:

1. Add the device in the appropriate group.

2. Create new allowed protocols based on the vendor guides. Policy ==> Policy Elements ==> Authentication ==> Allowed Protocols.

3. Create a new authorization Profile: Policy ==> Policy Elements ==> Results (If you are using ISE 2.3) ==> Authorization ==> Authorization Profiles.

// If you are using ISE 2.2 you have to enable the Policy Sets from Administration ==> Settings)

// The Authorization Profile must contains the Vendror Specific Attribute (Huawei) or Standard Attributes.

4. Create a new Policy Set in Policy ==> Policy Sets

a. Choose your Conditions and Choose the Allowed Protocols previously created in the Step 2.

b. The authentication Policy is not mandatory if you have added the appropriate conditions in the step 2.

c. Create an Athorization Policy and add the conditions and add the Authorization Profile previously created in the Step 3 as Results Profiles

Please don't hesitate if you need any further information.

Best regards

Re: Huawei AAA Radius device administration with cisco ISE

Sean — Sat, 12 Aug 2017 15:13:17 GMT

I did a step-by-step write up on using ISE as a RADIUS server for device management with AD credentials.

Cisco ISE: Device Administration with AD Credentials using RADIUS – WiFi Workshop

Re: Huawei AAA Radius device administration with cisco ISE

fernando vila — Fri, 26 Apr 2024 14:34:56 GMT

Hi Sean the link don´t work. Do you have a new one?