Hi,
I have a switch Cisco SG500X with 1.4.5.02 firmware.
I would to authenticate my users through ISE guest portal but I don't receive the redirection to Ise guest portal.
I try two methods for redirection:
- dynamic redirect url
- DNS sinkhole functionality of Cisco Ise 2.1
I use the steps described in this link as a guide for configuration on redirection for the last method:
http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-21/200604-Configure-Third-Party-NAD-Redirection-on.html
In both situation I always receive these logs on my Cisco SG500X:
%AAAEAP-W-RADIUSREPLY: Invalid attribute 65 ignored - tag should be 0
%AAAEAP-W-RADIUSREPLY: Invalid attribute 64 ignored - tag should be 0
I've activated RADIUS Vlan Assignment, either with Reject or Static option.
It seems like the switch doesn't support Change of Authorization (CoA) by Ise.
Is it true?
Does SG500X support CoA by Ise?
Thanks
Antonio
