Hi Francesco,
I attached a file with my actual running-all config.
I have no knowledge about sifs. so far, we don't enable it.
We use Microsoft NPS as a RADIUS.
this is the answer from our radius for a request from a phone:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 25.08.2020 16:15:56
Event ID: 6272
Task Category: Network Policy Server
Level: Information
Keywords: Audit Success
User: N/A
Computer: xxxxxxxxxxx
Description:
Network Policy Server granted access to a user.
User:
Security ID: xxxxxxxxxxx
Account Name: xxxxxxxxxxx
Account Domain: xxxxxxxxxxx
Fully Qualified Account Name: xxxxxxxxxxx
Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 00-77-xxxxxxxxxxx
Calling Station Identifier: 00-1B-xxxxxxxxxxx
NAS:
NAS IPv4 Address: xx.xxx.16.20
NAS IPv6 Address: -
NAS Identifier: Switch-C9300-001
NAS Port-Type: Ethernet
NAS Port: 50101
RADIUS Client:
Client Friendly Name: Switch_MGMT
Client IP Address: xx.xxx..16.20
Authentication Details:
Connection Request Policy Name: CRP_Wired
Network Policy Name: NP_MD5_IP-Phone
Authentication Provider: Windows
Authentication Server: xxxxxxxxxxx
Authentication Type: EAP
EAP Type: MD5-Challenge
Account Session Identifier: -
Logging Results: Accounting information was written to the SQL data store and the local log file.
Quarantine Information:
Result: Full Access
Session Identifier: -
with the old 3560x switches I could still turn on radius and aaa debug to check what's goning-on on my switch.
with the same command on the c9300 I don't see any intressting output. do the change RADIUS debbuging ?
thanks in advanced
