WEBconsole Radius Authentication

[kristiqirjako99]

Hello,

I am having a problem with radius authentication on the web console. The connect with radius is OK, i can see the request which is accepted from the radius side, where i do prv-lvl=15, but at the webpage it just reloads and rerequires again the authentication, so I am not able to login. 

It looks like something is missing in the reply from RADIUS.

[balaji.bandi]

Try different browser.

[kristiqirjako99]

The problem persists. If I turn off the radius authentification, and I keep it locally authenticated, all works fine

[balaji.bandi]

Cheers  that browser is ok, what Radius ?

[kristiqirjako99]

ClearPass

[balaji.bandi]

apoliogies, i would have asked this in the first instance, what Device mode and IOS code running on the device.

[MHM Cisco World]

It is GUI of WLC wat you want to auth via radius?

MHM

[kristiqirjako99]

GUI

[MHM Cisco World]

Sorry dont get your answer' it GUI of WLC ?

MHM

[kristiqirjako99]

Sorry, it is the GUI of a cisco switch 

[MHM Cisco World]

Ok' can I see how you config the SW.

MHM

[kristiqirjako99]

These are the configurations regarding the HTTP Radius

aaa group server radius ADMIN-RAD-SERVERS
server name cppma
server name cppmb
deadtime 15
!
!/ Authorization list Radius local /!
aaa authentication login default group ADMIN-RAD-SERVERS local
aaa authorization console
aaa authorization config-commands
aaa authorization exec default group ADMIN-RAD-SERVERS local

ip http authentication aaa login-authentication default
ip http authentication aaa exec-authorization default
!/ Enable https server /!
ip http secure-server
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
ip scp server enable
!

[MHM Cisco World]

ip http authentication aaa

Then re add

ip http authentication aaa login-authentication default
ip http authentication aaa exec-authorization default

MHM

[kristiqirjako99]

Nope, the problem persists. I can see the request in RADIUS, and also the privilege level is given, but there may be something missing from the Radius reply i think.

[MHM Cisco World]

Debug aaa authorization <- share this if @Aref Alsouqi suggested not work for you.

MHM