12-07-2023 03:52 AM - edited 12-07-2023 03:53 AM
I'm currently looking at RADIUS on some of our switches and noticed that the RADIUS type is showing as "non-standard".
Server group Management
Sharecount = 1 sg_unconfigured = FALSE
Type = non-standard Memlocks = 1
Server(192.168.1.50:1812,1813) Transactions:
Authen: 1 Author: 0 Acct: 0
Server_auto_test_enabled: FALSE
Keywrap enabled: FALSE
When I try to set this to standard, I get the message "Warning: non-standard parameter for the server, does not match with that of the public group. It will be changed to match the public group settings." and it sets it back to non-standard.
I've tried wiping out the RADIUS groups and starting from scratch but keep getting the above and can't find anything in Cisco's documentation or Bug search, any ideas?
12-07-2023 04:06 AM
what is the model of the switch and what IOS code running ?
can you also provide sample configuration on the switch ?
what Radius you using ? ISE ?
12-07-2023 05:09 AM
The switches having the issue are C2960X's running version 15.2(2).E7 (older IOS but unable to upgrade at this time).
We're using a third party RADIUS product.
RADIUS config is the same as other switches (the non-standard is what I'm unable to remove)...
aaa new-model
!
!
aaa group server radius Management
server name RADIUS1
!
aaa authentication login default group Management local
aaa authorization exec default group Management local
!
!
aaa session-id common
!
radius server RADIUS1
address ipv4 192.168.1.50 auth-port 1812 acct-port 1813
non-standard
key fefewft454tygfbv!fs
12-07-2023 05:51 AM
This radius work fine ?
I think non-standard is meaning you use port not 1645/1646.
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide