Authorization profile in ISE for ArubaOS switch radius authentication

[Romanpreet Singh]

Please help in configuring authorization profile in Cisco ISE for radius authentication of a Aruba Switch. I couldn't find anywhere what parameters to use in authorization profile for Aruba devices. e.g for Cisco we use " cisco-av-pair = priv-lvl=15". I trieds this also for Aruba but it doesn't work.

[MHM Cisco World]

https://www.netprojnetworks.com/basic-aaa-802-1x-wlan-authentication/

MHM

[Romanpreet Singh]

Thanks MHM, but the document doesn't show anything related to my requirement. It is all wireless dot1x.

I need help on creating authorization profile in ISE for AAA radius authentication to login in Aruba OS wired switch via ssh.

[MHM Cisco World]

ISE for admin control Aruba?

MHM

[ahollifield]

"Aruba Switch" meaning?  Legacy HPE Commware?  Legacy HPE ProCurve?  AOS-S?  AOS-CX?  Something else? 

Why not use TACACS+?  

[Romanpreet Singh]

Aruba CX 6000.

We don't have the option of Tacacs+.

I just want to configure ISE to authenticate user when he/she SSH this Aruba switch.  

[ahollifield]

Why not?  

[Romanpreet Singh]

Anyone has the solution ? 

[ahollifield]

https://support.hpe.com/techhub/eginfolib/Aruba/OS-CX_10.04/5200-6715/index.html#GUID-590EB729-6148-4F7C-A697-7BA67F2B5E01.html

https://community.cisco.com/t5/security-knowledge-base/cisco-ise-device-administration-prescriptive-deployment-guide/ta-p/3738365