topic Re: Authorization profile in ISE for ArubaOS switch radius authenticat in Network Access Control

Authorization profile in ISE for ArubaOS switch radius authentication

Romanpreet Singh — Wed, 28 Aug 2024 14:12:17 GMT

Please help in configuring authorization profile in Cisco ISE for radius authentication of a Aruba Switch. I couldn't find anywhere what parameters to use in authorization profile for Aruba devices. e.g for Cisco we use " cisco-av-pair = priv-lvl=15". I trieds this also for Aruba but it doesn't work.

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

MHM Cisco World — Wed, 28 Aug 2024 14:21:37 GMT

https://www.netprojnetworks.com/basic-aaa-802-1x-wlan-authentication/

MHM

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

Romanpreet Singh — Wed, 28 Aug 2024 15:45:56 GMT

Thanks MHM, but the document doesn't show anything related to my requirement. It is all wireless dot1x.

I need help on creating authorization profile in ISE for AAA radius authentication to login in Aruba OS wired switch via ssh.

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

MHM Cisco World — Wed, 28 Aug 2024 16:40:18 GMT

ISE for admin control Aruba?

MHM

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

ahollifield — Wed, 28 Aug 2024 21:01:55 GMT

"Aruba Switch" meaning? Legacy HPE Commware? Legacy HPE ProCurve? AOS-S? AOS-CX? Something else?

Why not use TACACS+?

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

Romanpreet Singh — Fri, 30 Aug 2024 15:46:11 GMT

Aruba CX 6000.

We don't have the option of Tacacs+.

I just want to configure ISE to authenticate user when he/she SSH this Aruba switch.

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

ahollifield — Tue, 03 Sep 2024 12:12:36 GMT

Why not?

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

Romanpreet Singh — Thu, 05 Sep 2024 14:40:58 GMT

Anyone has the solution ?

Re: Authorization profile in ISE for ArubaOS switch radius authenticat

ahollifield — Thu, 05 Sep 2024 15:47:57 GMT

https://support.hpe.com/techhub/eginfolib/Aruba/OS-CX_10.04/5200-6715/index.html#GUID-590EB729-6148-4F7C-A697-7BA67F2B5E01.html

https://community.cisco.com/t5/security-knowledge-base/cisco-ise-device-administration-prescriptive-deployment-guide/ta-p/3738365