AAA on Nexus 4.27d and RSA Radius Server

[jg]

I can authenticate between our MDS 9216i switch and RSA radius server

but my role does not come across. The logged in user is a network-operator not admin.

In the AV Pair i have defined shell:role*network-admin but it doesnt seem to come across

Any ideas?

[Javier Henderson]

It should be shell:roles*"network-admin" (ie, roles, not role)

[jg]

That was a type on my part, it is

shell:roles*"network-admin"

[Javier Henderson]

In that case, looking at the packet traffic between the switch and the RADIUS server would be useful.

Also, can you post your switch configuration (the AAA relevant parts)?

[jg]

Here are the relevant statements

radius-server timeout 30
radius-server retransmit 2
radius-server deadtime 1
radius-server host 172.16.0.64 key 7 "uoe_cehn!0" auth-port 1645 acct-port 1646
authentication accounting
radius-server host 10.16.0.64 key 7 "uoe_cehn!0" auth-port 1645 acct-port 1646 a
uthentication accounting
aaa group server radius radius
aaa group server radius securid
aaa authentication login default group securid

aaa group server radius radius

aaa group server radius securid

server 172.16.0.64

server 10.16.0.64