cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

ISE 1.3 - How to add login-service = ssh into ietf radius attributes

Hello,

 

I have to configure AAA on HP 6125 (c7000 enclosure) with ISE for SSH and TELNET access.

It works for TELNET but not for SSH.

 

Attributes sent in access-accept for TELNET are the following:

  • Huawei-Exec-Privilege = 3
  • login-Service = 0

0 is for TELNET. 

 

The problem is that SSH value is not available by default and you have to add it into the IETF dictionnary. I made it with Microsoft NPS and it works perfectly.

Unfortunatly it seems not possible with Cisco ISE. Please could you help me ?

 

Regards,

 

Thibault

Who Me Too'd this topic