forget it, please delete the post, i did it via vmware with dvs just one missing ticket in the vmm domain ... View more

Hi all, im getting the following error from ise    Event 5400 Authentication failed Failure Reason 11014 RADIUS packet contains invalid attribute(s)     in the extreme device the lines that you put in are::   configure radius netlogin primary server 10.8.54.120 1812 client-ip 10.8.54.121 vr VR-Default configure radius netlogin primary shared-secret encrypted "Didata2019" enable radius netlogin configure netlogin vlan cisco configure netlogin dynamic-vlan enable configure netlogin dynamic-vlan uplink-ports 48 enable ports 11-24 dot1x configure netlogin ports 2 mode port-based-vlans configure netlogin ports 2 no-restart and snmp is configure   so, i have a few questions, it's imperative to have the snmpv3 or can be the snmpv2 to work with? but the devices and users are not going to the check, when a take a tcp dump do you know which more attribute do we have to put in the ISE device?     this is the tcp and the radius challenge   18:27:16.482677 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 134) X.X.X.X.41884 > srv-ise-: RADIUS, length: 106 Access-Request (1), id: 0x5c, Authenticator: 4222cceb304c20525556ce28010d3cf6 User-Name Attribute (1), length: 8, Value: srojas EAP-Message Attribute (79), length: 13, Value: .. NAS-IP-Address Attribute (4), length: 6, Value: 10.8.54.121 Service-Type Attribute (6), length: 6, Value: Login Calling-Station-Id Attribute (31), length: 19, Value: E8-6A-64-2E-6D-3A NAS-Port-Id Attribute (87), length: 4, Value: 21 NAS-Port Attribute (5), length: 6, Value: 1021 NAS-Port-Type Attribute (61), length: 6, Value: Ethernet Message-Authenticator Attribute (80), length: 18, Value: {....w..]...._.c 18:27:16.486793 IP (tos 0x0, ttl 64, id 11075, offset 0, flags [DF], proto UDP (17), length 180) srv-ise > X,X,X,X 1884: RADIUS, length: 152 Access-Challenge (11), id: 0x5c, Authenticator: 4a5051e21408fcb0f25eb794f08b3998 State Attribute (24), length: 106, Value: 64CPMSessionID=0a083678VsRdGYwkon5XnlXinUbVtE4xg2G5Jp9VYxWEH0/ql2U;34SessionID=srv-ise-poc/334695666/92; EAP-Message Attribute (79), length: 8, Value: .d Message-Authenticator Attribute (80), length: 18, Value: .M>F. 18:27:16.491115 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 355) X.X.X.X.41884 > srv-ise: RADIUS, length: 327 Access-Request (1), id: 0x5d, Authenticator: 34a2b32737e5e7c059c32f31161a99b3 User-Name Attribute (1), length: 8, Value: srojas EAP-Message Attribute (79), length: 168, Value: .d NAS-IP-Address Attribute (4), length: 6, Value: 10.8.54.121 Service-Type Attribute (6), length: 6, Value: Login Calling-Station-Id Attribute (31), length: 19, Value: E8-6A-64-2E-6D-3A NAS-Port-Id Attribute (87), length: 4, Value: 21 NAS-Port Attribute (5), length: 6, Value: 1021 NAS-Port-Type Attribute (61), length: 6, Value: Ethernet State Attribute (24), length: 66, Value: 64CPMSessionID=0a083678VsRdGYwkon5XnlXinUbVtE4xg2G5Jp9VYxWEH0/ql Message-Authenticator Attribute (80), length: 18, Value: <.1.B.^.w....n.. 18:27:16.494422 IP (tos 0x0, ttl 64, id 11077, offset 0, flags [DF], proto UDP (17), length 66) srv-ise > X.X.X.X.41884: RADIUS, length: 38 Access-Reject (3), id: 0x5d, Authenticator: a7b41552a449bf5985ff3ec0b104379e Message-Authenticator Attribute (80), length: 18, Value: p.......3.@E^.$.       ... View more

Hello, you need whatever linux distro, you can use ubuntu or centos i thinks it use 2.7, but it doesn't care about the version, because you can use what's come in the machine and start to build a scripts ... View more

it's becasue it's an unexplorer area, programmers do not touch networking, and vice versa, there is an oportunity on it, for automate, right now i installed a centos with acitoolkit, and let you to do a lot of things in the aci. ... View more

I recently decide to explore this option, it's really helpful, it comes with samples that are scripts for creating specific things like bd, context and tenants, other like monitoring, and the best one are the applications, like link, acidiagram and endpointtracker, you have to have linux, bd and some python knowledge to install, setting and use it. if you need more guide, don hesitate to post it in the forum ... View more