Security

Reply
Occasional Contributor II
Posts: 13
Registered: ‎08-19-2015

Juniper SSG and CPPM RADIUS/TACACS configuration help

This is the SSG Configuration

 

set auth-server "external" id 1
set auth-server "external" server-name "172.16.1.10"
set auth-server "external" account-type admin
set auth-server "external" type tacacs
set auth-server "external" tacacs secret "xxxxxx"
set auth-server "external" tacacs port 49
set admin auth server "external"
set admin auth remote root
set admin privilege get-external

 

I'm just not clear on how to create the enforcement profiles and policy..

 

thanks for the help!

Occasional Contributor II
Posts: 13
Registered: ‎08-19-2015

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

I have attached the logged error screenshot and the enforcement screenshot.

 

 

Occasional Contributor I
Posts: 5
Registered: ‎08-04-2016

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

Hi,

 

I am facing the same issue. Has anyone able to solve this? What attributes should I put in the enforcement profile?

 

Aruba please help with this.

 

Thanks.

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

You should be able to follow similar steps in ClearPass:

 

https://kb.juniper.net/InfoCenter/index?page=content&id=KB23458&actp=search


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I
Posts: 5
Registered: ‎08-04-2016

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

I have tried to configure similarly but still unable to be done. There are some steps not available in aruba cppm from the cisco acs.

 

Can you provide the step by step guide with exact configurations for Juniper SSG and Aruba CPPM tacacs?

 

Aruba support please help and advise. 

Thanks! :)

Occasional Contributor I
Posts: 5
Registered: ‎08-04-2016

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

Any support or help from Aruba? Until now, I still can't get it to work.

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

Unfortunately we don't have an SSG to test with. Have you reached out to
your Aruba ClearPass partner?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I
Posts: 5
Registered: ‎08-04-2016

Re: Juniper SSG and CPPM RADIUS/TACACS configuration help

Yea, they can't solve it too and asked us to go online and ask aruba directly so that is why I'm here. Can it support Juniper Netscreen services? Any dictionary for it?

Search Airheads
Showing results for 
Search instead for 
Did you mean: