AAA Radius NAS-Port-Type is not sent in the authentication request to the RADIUS server when ASA with software version 7.2 is used

[TCC_2]

Core issue

This problem occurs due to the presence of Cisco bug ID CSCsf27202.

The problem starts when these conditions are met:

• The device runs the 7.2.1 software image.
  
  
• RADIUS authentication for tunnel-group is configured.
  
  
• The password-management command in tunnel-group general-attributes is configured.

Resolution

Follow one of these steps as a workaround:

• Do not use the password-management command and upgrade the software version to 7.2(2) and later if possible.
  
•  
  Downgrade the software to version 7.1.
     

Note: The radius-with-expiry command has been deprecated and the new command is password-management in software version 7.2 and later.

For more information on how to use the Expiry feature using the Microsoft Internet Authentication Server, refer to VPN 3000 RADIUS with Expiry Feature using Microsoft Internet Authentication Server.

For further information on the authentication configuration, refer to PIX/ASA 7.x and Cisco VPN Client 4.x for Windows with Microsoft Windows 2003 IAS RADIUS Authentication Configuration Example.

Use the Software Download Center in order to download the PIX Firewall software.