cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2066
Views
0
Helpful
2
Replies

Nexus NXOS authentication via RADIUS

firemtngems
Beginner
Beginner

Greetings,

I have a Nexus 7010 running 5.1(1).  I'm using RADIUS (Microsoft) to authenticate access to the device.

In prior versions of the IOS, RADIUS attribute 31 was forwarded to the RADIUS server.  In NXOS, this attribute is not forwarded.  Is there any way to configure NXOS to forward RADIUS attribute 31?  Note that some versions of the IOS have radius commands to enable it (i.e. "radius-server attribute 31 send nas-port-detail").

The functionality I wish to achive is to apply RADIUS policies by the user's IP address.

Thanks for taking a look...

Mike

1 Accepted Solution

Accepted Solutions

phiharri
Beginner
Beginner

Greetings Mike,

Sending attribute 31 (Calling-Station-Id) isn't currently supported when using RADIUS authentication under NX-OS. I took a quick look and couldn't find any mention in the roadmap.

I'd recommend contacting TAC or your Cisco Account team to raise a feature request. Although it probably doesn't help much, TACACS+ will include the address of the authenticating user.

Cheers,

/Phil

View solution in original post

2 Replies 2

phiharri
Beginner
Beginner

Greetings Mike,

Sending attribute 31 (Calling-Station-Id) isn't currently supported when using RADIUS authentication under NX-OS. I took a quick look and couldn't find any mention in the roadmap.

I'd recommend contacting TAC or your Cisco Account team to raise a feature request. Although it probably doesn't help much, TACACS+ will include the address of the authenticating user.

Cheers,

/Phil