topic Re: ISE 2.3 RADIUS attributes 135, 136 and 137 in Network Access Control

ISE 2.3 RADIUS attributes 135, 136 and 137

rick505d3 — Fri, 21 Feb 2020 18:40:16 GMT

Hi,

I need to send RADIUS attributes 135, 136 and 137 in a AuthZ profile to a requesting NAD. These attributes are available in ISE 1.3 as "Radius:Ascend-Client-xx" parameters.

However, there is no equivalent of these in ISE 2.3. How can these attribs be send in ISE 2.3 ?

Regards,

Rick.

Re: ISE 2.3 RADIUS attributes 135, 136 and 137

Arne Bier — Mon, 27 Nov 2017 01:37:19 GMT

I don't think that the attributes you mentioned are standard IETF attributes

https://www.iana.org/assignments/radius-types/radius-types.xhtml

And in my ISE 2.3 platform those ranges you mentioned are set to undefined, which means you can go in there are set the attributes accordingly.

I did one example below for attribute 137. I don't know much about what type that attribute should be, but from your example it looks like a STRING.

The others should of type IPv4 most probably

Re: ISE 2.3 RADIUS attributes 135, 136 and 137

rick505d3 — Mon, 27 Nov 2017 02:27:35 GMT

Hi Arne,

Thanks for the quick and really helpful response. I can see these as undefined as well in the Dictionary in ISE 2.3, while ISE 1.3 has these defined as in my earlier screenshot.

For reference of others, this is how I have now configured these in ISE 2.3.