About Ian Cowley

Ian Cowley · 08-18-2014

Question - which to choose? Scenarios with devices attaching to 3850s 150-1.EZ2, ISE v1.21. IP Phone with daisy-chained PC2. dumb hub with IP Phone and multiple PCs authentication host-mode multi-domainorauthentication host-mode multi-authAND authent...

Ian Cowley · 08-15-2014

Just a note:Some devices send regular RADIUS status messages;The ISE drops these as Event: 5405 RADIUS Request droppedFailure Reason: 11031 RADIUS packet type is not a valid RequestRoot cause: RADIUS packet type is not a valid Request.Wireshark shows...

Ian Cowley · 07-29-2014

Two Ironport Nodes with User Authentication configured under Cluster Management mode (the only way).and SubmittedRADIUS provided by 3-node Cisco ISE v1.2, authenticating against Microsoft AD. Both nodes defined as Network Devices.One machine works f...

Ian Cowley · 02-21-2014

VENDOR RBT 17163ATTRIBUTE Local-User 1 string RBTTACACS+ docsTACACS+ (Shell Profile) Attribute(s): service ; local-user-name Value(s): rbt-exec ; <username> Usage: In order to grant the user read-only access, the <username> value must be set to monit...

Ian Cowley · 02-17-2014

I have a situation where I have a number of ASA and IPS instances being managed from CSM 4.4sp2.The credentials are validated via RADIUS to a Cisco ISE v1.2.All the devices use the same account and credentials; and have been configured the same way.T...

Ian Cowley · 08-18-2014

NenoNothing to do with that,The devices will use RADIUS to authenticate fine; databass, credentials, etc fine.However they send keepalives to validate the RADIUS server is still there. ISE doesn't implement this and ISE logs get full of rejections. ...

Ian Cowley · 08-01-2014

RADIUS 101 Failure!!!Turned out that RADIUS Shared Secret had a typo for one of the nodes.But working with Cisco TAC introduced us to a very useful CLI command'tail'Currently configured logs: Log Name Log Type Retri...

Ian Cowley · 07-29-2014

OK it works..though perhaps not as granularly as I'd like.2 Authorization Rules; both identify the Riverbed device; VTY, PAP, Riverbed Device Group.and either AD Group for Admins, or Service Desk (in my case).The Permsisions responses [Policy - Resul...

Ian Cowley · 07-29-2014

StephenLet me check...I might not have been as thorough as you! IanC

Ian Cowley · 07-22-2014

Attributes DetailsService Template falseAccess Type ACCESS_ACCEPTRadius:Service-Type Administrative(6)Riverbed:Local-User adminLocal user Dictionary Attribute ID is also '1' The AuthProfile sends this if user is in correc...

Member Since	‎10-26-2006 12:27 AM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	49
Total Helpful Votes Received	13

User Statistics

User Activity

DOT1X authentication host-mode

ISE v1.2 - Status-Server - 5405 RADIUS Request dropped

IronPort 8.5.6 Cluster RADIUS Authentication - One Node works; the other doesn't!

ISE v1.2 RADIUS - Authentication of access to a Riverbed Steelhead

CSM 4.4SP2

NenoNothing to do with that

RADIUS 101 Failure!!!Turned

OK it works..though perhaps

StephenLet me check...I might

Attributes DetailsService