11-26-2017 05:07 PM - edited 02-21-2020 10:40 AM
Hi,
I need to send RADIUS attributes 135, 136 and 137 in a AuthZ profile to a requesting NAD. These attributes are available in ISE 1.3 as "Radius:Ascend-Client-xx" parameters.
However, there is no equivalent of these in ISE 2.3. How can these attribs be send in ISE 2.3 ?
Regards,
Rick.
Solved! Go to Solution.
11-26-2017 05:37 PM
I don't think that the attributes you mentioned are standard IETF attributes
https://www.iana.org/assignments/radius-types/radius-types.xhtml
And in my ISE 2.3 platform those ranges you mentioned are set to undefined, which means you can go in there are set the attributes accordingly.
I did one example below for attribute 137. I don't know much about what type that attribute should be, but from your example it looks like a STRING.
The others should of type IPv4 most probably
11-26-2017 05:37 PM
I don't think that the attributes you mentioned are standard IETF attributes
https://www.iana.org/assignments/radius-types/radius-types.xhtml
And in my ISE 2.3 platform those ranges you mentioned are set to undefined, which means you can go in there are set the attributes accordingly.
I did one example below for attribute 137. I don't know much about what type that attribute should be, but from your example it looks like a STRING.
The others should of type IPv4 most probably
11-26-2017 06:14 PM - edited 11-26-2017 06:27 PM
Hi Arne,
Thanks for the quick and really helpful response. I can see these as undefined as well in the Dictionary in ISE 2.3, while ISE 1.3 has these defined as in my earlier screenshot.
For reference of others, this is how I have now configured these in ISE 2.3.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: