02-14-2005 11:45 PM - edited 07-04-2021 10:27 AM
Hi,
I have install the last version of IOS (12.3(2)JA2)on one of my AP 1231G and I have a problem to access to the AP via http and https.
This is my aaa configuration:
aaa new-model
!
!
aaa group server radius rad_adm
server xxx.xxx.xxx.xxx auth-port 1645 acct-port 1646
!
aaa authentication login default group radius line
aaa authentication login console line
aaa authorization exec default group radius if-authenticated
aaa accounting exec default start-stop group rad_adm
aaa session-id common
and
ip http server
ip http authentication aaa
radius-server attribute 32 include-in-access-req format %h
radius-server host xxx.xxx.xxx.xxx auth-port 1645 acct-port 1646 key 7 yyyyyyyyyyyyyy
radius-server vsa send accounting
when I want to access to my AP via http, the login is refused and the AP logs:
Feb 15 08:14:19.612: AAA/AUTHEN/LOGIN (00000000): Pick method list 'console'
Feb 15 08:14:19.613: AAA/AUTHEN/LINE(00000000): FAIL Line password not found
the http authentication must use the aaa "default method"(via radius), but it uses the "console method".
on the AP with the IOS 12.2(8)JA and the same configuration, the http(s) authentication works correctly.
it's a bug on 12.3(2)JA2 version or I must change my configuration? the "aaa system" has changed on this IOS version ?
for your information, I have the same problem with the version 12.3(2)JA.
thanks for your help.
Regards
Sam
02-15-2005 12:55 AM
aaa authentication login default group rad_adm console
instead of
aaa authentication login console line
02-16-2005 02:51 AM
I have tried the command line:
aaa authentication login default group rad_adm console
but it's not possible, because after the group rad_adm we can only use: enable, group, line, local, local-case or none
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide