topic ACS integration with packetshaper in Network Access Control

ACS integration with packetshaper

rakeshvelagala — Mon, 11 Mar 2019 04:18:40 GMT

Hi All,

I have the same issue as below. Please advise.

We have a strange issue may be an known issue. We have the ACS 5.3.0.40 with Bluecoat Packetshaper (Packeteer) as the Radius Client and tried with PAP as well as CHAP with the suggested VSA. But once we try to authenticate with GUI in the PS end we get authentication failed. i.e its says invalid password but in the ACS end we get it as the Auth success log. We are not able to login to the PS as well.

Thanks in advance.

Regards,

Rakesh

ACS integration with packetshaper

rakeshvelagala — Wed, 22 Jan 2014 15:12:41 GMT

Hi Guys,

Anyone encountered similar issue?? Please advise

Thanks

ACS integration with packetshaper

Javier Henderson — Sun, 26 Jan 2014 19:53:57 GMT

Does the Bluecoat Packetshaper require the RADIUS server to return a custom A/V pair?

You may want to approach Bluecoat and ask them for their input on this.

Javier Henderson

Cisco Systems

ACS integration with packetshaper

rakeshvelagala — Mon, 27 Jan 2014 05:12:57 GMT

Hi Javier,

We are actually using ISE for integration. I have checked one of the documents by Cisco TAC and according to that for ACS radius authentication, they only need access=look to be sent. I have configured the same on the ISE but still same.

Regards,

Rakesh

ACS integration with packetshaper

rakeshvelagala — Tue, 28 Jan 2014 15:41:35 GMT

Hi All,

I have configured as below in ISE. Can someone please advise from the attached image, if say I need to define static attribute of type string access=look. Is this the correct way of doing it?

Thanks

Best Regards,

Rakesh

ACS integration with packetshaper

blenka — Thu, 30 Jan 2014 21:00:38 GMT

Please go through the link below and can verify the configuration.

https://supportforums.cisco.com/docs/DOC-27259