CIsco ISE with HP and Fortigate

[nimmi.phasil]

Hi ,

I have configured HP switches 5820X and 5130 for AAA radius authentication with Cisco ISE 2.0.0.306 .

The switch receives successful authorization reply ; but unable to login . What would be the advanced attributes for Radius Authorization profile in 

ISE ?

Also , does ISE support Fotigate firewalls ?

[jan.nielsen]

According to the link, HP expects a role to be returned as a Cisco-AVPair, you should try adding that to your authorization profile :

Cisco-avpiar = shell:roles=”network-admin”

https://abouthpnetworking.com/2014/03/16/comware7-radius-based-rbac-user-role-assignment/

[jan.nielsen · Accepted solution]

Oh, and yes ISE supports any device that uses rfc compliant radius, it's usually only a matter of finding out what av-pairs to send back to that specific device, there is not really any standard for that.

[Jeffrey Jones]

so your using cisco av-pair with HP switches?

[nimmi.phasil]

Hi Jan,

Tried

 Cisco:cisco-av-pair shell:roles=network-admin

Radius:Service-Type Administrative/Login/NAS Prompt

HP:HP-Privilege-Level 3

The server sends authorization successful messages with all combinations ; switch receives the message.

But login failed message is shown.

[jan.nielsen]

Did your put network-admin in quotes?

[nimmi.phasil]

Tried with quotes

[jan.nielsen · Accepted solution]

Did you read the link i attached earlier, is your config on your swith setup like that, with both authentication and accounting configured ? maybe have a read through the comments on the link i sent you, to see what other people have had problems with. I'm pretty sure it's on the switch you need to find your problem. Oh, and actually i don't think you need the quotes

[nimmi.phasil]

Hi Jan,

The issue is resolved when accounting is configured.

Thank You !

[Scott Parish]

Nimmi,

Did you ever get ISE and Fortigate working together?

Scott

[sajid231088]

Could you please share HP switch configuration.

I tried to do it but couldn't het any success.