For download: RADIUS Vendor Dictionaries for 3rd Parties

[katmcnam]

I took some time to import and update quite a bit of RADIUS vendor dictionaries for 3rd party vendors into ISE. I grabbed this information from various community and open source sites but I obviously can't test it against every vendor out there since I don't have  a selection of 140+ 3rd party NADs sitting in my lab. After I imported them to ISE, I exported them and have uploaded them here. 

Note: If any of these don't work or I need to update some of the attributes, please shoot me a PM and I'll make the necessary adjustments. Also if there are any vendors I should be adding, let me know.

• 3com
• 3GPP
• 3GPP2
• Acc
• Acme
• Actelis
• Adtran
• Alcatel
• Alcatel-Service-Router
• Alcatel-Lucent AAA
• Alteon
• Alvarion
• APC
• Aptilo
• Arbor
• Arista
• Aruba
• Azaire
• Ascend
• Bay Networks
• BinTec
• Bluecoat
• Boingo
• Broadsoft
• Brocade
• British Sky Broadcasting Group
• British Telecom
• Cablelabs
• Cabletron
• Camiant
• Checkpoint
• Chillispot
• Citrix
• Clavister
• Cnergee Access Server
• Colubris
• Compatible Systems Corporation
• Cosine
• Dante
• Dell EMC
• Dlink
• Digium
• Dragonwave
• Efficient IP
• Eltex
• Epygi
• ERX
• EqualLogic
• Ericsson
• Ericsson-AB
• Ericsson Packet Core Networks
• Extreme
• F5
• FdXtended
• FreeRADIUS
• FreeSwitch
• Fortinet
• Foundry
• Gandalf
• Gemtek
• H3C
• Hillstone
• HP
• Huawei
• IEA Software
• Infonet
• Issanni
• ITK
• IP Unplugged
• Juniper
• Karlnet
• Kineto
• Lancom
• Lantronix
• Livingston
• Local Web
• Lucent
• Manzara
• Meinberg
• Meraki
• Merit
• Meru
• Microsemi
• Microsoft
• Mikrotik
• Mimosa
• Motorola
• Motorola-Symbol
• Navini
• NetBorder
• Netscreen
• Network Physics
• Nexans
• NTUA
• Nokia
• Nomadix, Inc
• Nortel
• Packeteer (Later acquired by Blue Coat)
• Palo Alto Networks
• Patton IADs
• Perle Systems
• Propel
• Prosoft
• Proxim Wireless
• Purewave Networks Base Station
• Quiconnect
• Quintum
• Redcreek
• Riverbed
• Riverstone Networks
• Roaring Penguin
• RuggedCom
• Ruckus
• Shasta
• SG-1 Systems by Runcom Technologies
• Siemens
• Slipstream
• SofaWare VPN Edge (Now Checkpoint)
• Softbank
• SonicWall
• SpringTide
• Starent
• SurfNet
• Telebit
• Terena
• Trapeze/Juniper
• Travelping
• Tropos
• T-Systems-Nova
• Ukerna
• Unix
• USR Robotics
• UT Starcom
• Valemount Networks
• VersaNet Communications, Inc
• Waverider
• Walabi
• Wichorus
• WiFi-Alliance
• WiMAX
• WISPr
• Xedia
• Yubico
• Zeus Packet
• ZTE
• Zyxel

[yshchory]

As usual, Katherine, you're a rockstar!!!

Thank you for this, working with the team to see if there's a way to get this into the product itself to enhance the experience, but until then - I'm sure that it will be easier for ISE users to use 3rd party NADs with these dictionaries!

Yuval

[d.silcox]

katmcnam,

Thank you for including the RuggedCom switch. However, I am having a hard time to use the ISE to authenticate the RuggedCom switch. The log in ISE is fine, but RuggedCom switch showed login failed. I have been using the ACS v5.4 for RuggedCom. I just started to use ISE 2.6. Any help would be appreciated. Thanks!

[Rich R]

Am I missing something here @katmcnam - I don't see a downloadable attachment?

[bradjohnson]

@Rich R Click each individual manufacturer. There isn't a single link to download all.

[lex.jimenez]

Any chance you could create a working dictionary for Ribbon/Sonus voice devices?

[daniel.brooks]

Is there one for NetScout Systems Inc? 

[SalmanHKhan]

Hi Katherine,

I tried to upload different files but I get the "Unable to read file - please ensure file is in XML format and extension." Please let me know what am I doing wrong here?

[Karsten Iwen]

For Meraki, there are some more attributes:

VENDOR Meraki 29671
BEGIN-VENDOR Meraki
ATTRIBUTE Meraki-Device-Name 1 string BOTH
ATTRIBUTE Meraki-Network-Name 2 string BOTH
ATTRIBUTE Meraki-Ap-Name 3 string BOTH
ATTRIBUTE Meraki-Ap-Tags 4 string BOTH
END-VENDOR Meraki

And the ISE also misses some standard attributes defined in RFC7268:
https://cyber-fi.net/index.php/2022/08/17/tuning-the-cisco-ise-for-meraki-networks/
At least Meraki APs send them.

[SalmanHKhan]

Nevermind, I was uploading the file in the wrong place.

[hamza.al-sammarai]

I cannot see the vendor-dictionaries for Ubiquiti UniFi any one can help?

[Afzaal27]

Any chance you could create a working dictionary for RAD Secflow and 4RF Devices?

[sandesh-dhuri]

Do we have network device profiles for Fortinet ?