Authentication Proxy with RADIUS

[zirbo]

Hi,

I have a problem with auth-proxy using RADIUS - authentication fails, although the Radius server (MS IAS) reports authentication success (I guess this is really an authorization issue):

I am using the config described in the attached file.

When I use local auth-proxy autorization it works fine.

When I use RADIUS I get an authentication failure on the Internet Explorer login page, but IAS reports success.

Also - in the existing setup I am not able to use RADIUS for VTY access - I get an %authorization failure% (not authentication).

I have attached the router debugs and the IAS server config.

If anyone has a suggestion I would really appreciate it.

Thanks,

Dragos

[b.hsu]

IAS server might be incorrect Radius Attribute to the router.ou can find an example of the RADIUS attributes required at the end of

'Configuring Authentication Proxy' at http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804ad9bc.html#wp1002138