auth-proxy with RADIUS on 3750

jobrien9291 — Thu, 08 Oct 2020 01:31:49 GMT

I'm trying to set up auth-proxy on a 3750 running 12.5(55). The config seems to proceed normally until I try to configure the interface itself. I get this:

colo2-sw(config)#int vlan6
colo2-sw(config-if)#ip auth-proxy PROX_NAME
% This config is not supported on this platform. Try configuring a new rule.

I found an old post with the same issue and the last entry was:

"answer from Cisco: webauth or auth-proxy supported only via RADIUS or TACACs.

Not supported via local authentication ...."

...but I am using RADIUS

aaa authentication login default group WINDOWS-RADIUS local
aaa authorization auth-proxy default group radius
aaa accounting auth-proxy default start-stop group radius

If anyone knows what the magic is to get this to work I'd sure like to hear it.

Thanks.

Re: auth-proxy with RADIUS on 3750

balaji.bandi — Thu, 08 Oct 2020 11:22:50 GMT

Can you post show version, - been long oin 3750 - LAN base not support here.

Re: auth-proxy with RADIUS on 3750

jobrien9291 — Thu, 08 Oct 2020 13:46:48 GMT

Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 12.2(55)SE10, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Wed 11-Feb-15 11:17 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x02800000

ROM: Bootstrap program is C3750E boot loader
BOOTLDR: C3750E Boot Loader (C3750X-HBOOT-M) Version 15.2(3r)E, RELEASE SOFTWARE (fc1)

colo2-sw uptime is 8 weeks, 1 day, 20 hours, 25 minutes
System returned to ROM by power-on
System restarted at 13:22:24 EDT Tue Aug 11 2020
System image file is "flash:/c3750e-universalk9-mz.122-55.SE10/c3750e-universalk9-mz.122-55.SE10.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

License Level: ipbase
License Type: Permanent
Next reload license Level: ipbase

cisco WS-C3750X-48 (PowerPC405) processor (revision W0) with 262144K bytes of memory.
Processor board ID FDO1941F2J0
Last reset from power-on
11 Virtual Ethernet interfaces
1 FastEthernet interface
156 Gigabit Ethernet interfaces
6 Ten Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 70:E4:22:C2:9A:00
Motherboard assembly number : 73-15468-04
Motherboard serial number : FDO19411732
Model revision number : W0
Motherboard revision number : A0
Model number : WS-C3750X-48T-S
Daughterboard assembly number : 800-32727-03
Daughterboard serial number : FDO19411632
System serial number : FDO1941F2J0
Top Assembly Part Number : 800-38989-01
Top Assembly Revision Number : B0
Version ID : V07
CLEI Code Number : CMMPN00DRB
Hardware Board Revision Number : 0x05

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 54 WS-C3750X-48 12.2(55)SE10 C3750E-UNIVERSALK9-M
2 54 WS-C3750X-48 12.2(55)SE10 C3750E-UNIVERSALK9-M
3 54 WS-C3750X-48 12.2(55)SE10 C3750E-UNIVERSALK9-M

Switch 02
---------
Switch Uptime : 8 weeks, 1 day, 20 hours, 21 minutes
Base ethernet MAC Address : 70:E4:22:C2:97:80
Motherboard assembly number : 73-15468-04
Motherboard serial number : FDO1941171H
Model revision number : W0
Motherboard revision number : A0
Model number : WS-C3750X-48T-S
Daughterboard assembly number : 800-32727-03
Daughterboard serial number : FDO194115KY
System serial number : FDO1941F2HX
Top assembly part number : 800-38989-01
Top assembly revision number : B0
Version ID : V07
CLEI Code Number : CMMPN00DRB
License Level : ipbase
License Type : Permanent
Next reboot licensing Level : ipbase

Switch 03
---------
Switch Uptime : 8 weeks, 1 day, 20 hours, 23 minutes
Base ethernet MAC Address : 70:E4:22:C2:99:80
Motherboard assembly number : 73-15468-04
Motherboard serial number : FDO1941173B
Model revision number : W0
Motherboard revision number : A0
Model number : WS-C3750X-48T-S
Daughterboard assembly number : 800-32727-03
Daughterboard serial number : FDO194116AY
System serial number : FDO1941F2HZ
Top assembly part number : 800-38989-01
Top assembly revision number : B0
Version ID : V07
CLEI Code Number : CMMPN00DRB
License Level : ipbase
License Type : Permanent
Next reboot licensing Level : ipbase

Configuration register is 0xF

topic Re: auth-proxy with RADIUS on 3750 in Network Security

auth-proxy with RADIUS on 3750

Re: auth-proxy with RADIUS on 3750

Re: auth-proxy with RADIUS on 3750