cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

CISCO SWITCHES FOR SMALL and MEDIUM BUSINESS

Introducing the next generation of Cisco Small and Medium Business Switches. Cisco is refreshing its SMB Switch portfolio. Click here  to learn more.


394
Views
0
Helpful
0
Replies
Highlighted

sg500x and Cisco Ise guest portal redirection

Hi,

I have a switch Cisco SG500X with 1.4.5.02 firmware.

I would to authenticate my users through ISE guest portal but I don't receive the redirection to Ise guest portal.

I try two methods for redirection:

- dynamic redirect url

- DNS sinkhole functionality of Cisco Ise 2.1

I use the steps described in this link as a guide for configuration on redirection for the last method:

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-21/200604-Configure-Third-Party-NAD-Redirection-on.html

In both situation I always receive these logs on my Cisco SG500X:

%AAAEAP-W-RADIUSREPLY: Invalid attribute 65 ignored - tag should be 0

%AAAEAP-W-RADIUSREPLY: Invalid attribute 64 ignored - tag should be 0

I've activated RADIUS Vlan Assignment, either with Reject or Static option.

It seems like the switch doesn't support Change of Authorization (CoA) by Ise.

Is it true?

Does SG500X support CoA by Ise?

Thanks

Antonio

Everyone's tags (1)