topic Re: Problem with RADIUS Authentication on hhtps in Network Access Control

Problem with RADIUS Authentication on hhtps

aims — Wed, 13 Apr 2022 07:47:03 GMT

I have managed to authenticate through ssh on my C3650 stack but when i am trying to authenticate from https i get a message that says wrong credentials. It seems that the issue is what the radius servers returns but i wasn't able to find anything on the web. Any suggestions please?

Re: Problem with RADIUS Authentication on hhtps

Flavio Miranda — Wed, 13 Apr 2022 09:53:54 GMT

Do you have "ip http authentication aaa" configured on the switch?

What might happeing is that you dont have the above command and the switch is using local authentication for http/https. As you try with TACACS user, it refuses.

Re: Problem with RADIUS Authentication on hhtps

balaji.bandi — Wed, 13 Apr 2022 14:30:00 GMT

what kind of authenticaiton you have local or radius :

check below document :

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/https/configuration/xe-3se/3650/https-xe-3se-3650-book/nm-http-web.html

Re: Problem with RADIUS Authentication on hhtps

aims — Thu, 14 Apr 2022 06:22:05 GMT

As i mentioned on the first post, i can login using radius on ssh. On http when i do my tries i add this line on configuration file:

ip http authentication aaa login-authentication default

When i add this line on radius server i see that my users are authenticated successfully but on the https login page i get the below screen.

and of course if i log in with my local account i get the same message and authentecation failed on radius.

On radius server i have the following settings:

and