Showing results for 
Search instead for 
Did you mean: 

Who Me Too'd this topic

ISE 1.3 - How to add login-service = ssh into ietf radius attributes



I have to configure AAA on HP 6125 (c7000 enclosure) with ISE for SSH and TELNET access.

It works for TELNET but not for SSH.


Attributes sent in access-accept for TELNET are the following:

  • Huawei-Exec-Privilege = 3
  • login-Service = 0

0 is for TELNET. 


The problem is that SSH value is not available by default and you have to add it into the IETF dictionnary. I made it with Microsoft NPS and it works perfectly.

Unfortunatly it seems not possible with Cisco ISE. Please could you help me ?





Who Me Too'd this topic