RADIUS Authentication on SG200-08 not working

[patrick.casey1]

For the life of me, I can't get my SG200-08 to authenticate via RADIUS.

My wireshark captures show that the requests are being accepted.

My RADIUS server logs show that the user is being authenticated successfully.

Even the RADIUS statistics on the switch show the correct number of Access Accepts (currently two).

I'm at a loss as to how I can get this to function. 

I've included my startup-config from the switch and my radius packet captures from Wireshark.

[Michal Bruncko]

Hello Patrick

I can see two issues:

• your RADIUS server is responding too late - i.e. Access-Accept came with delay 8 seconds since first Access-Request sent by client. Thats really too long and cause visible authentication delays for users. Response should normally came within second.
• you get Access-Accept, but you did not get logged in - this is because of missing important TLV's in RADIUS response message. You have to define following TLVs to be included in each positive response:

Service-Type = Administrative-User
Cisco-AVPair = "shell:priv-lvl=15"

Only with them switch recognizes that you are authorized to log in.