Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Radius Attribute on IAP

This thread has been viewed 2 times
  • 1.  Radius Attribute on IAP

    Posted Jun 15, 2017 04:37 AM

    Hi All,

     

    We need to use Cisco ISE or Microsoft NPS.

    The required service-type Radius attribute will be "FRAMED".

    It is not possible with actual version, the attribute is "Login"

     

    Can you publish a new IAP version which would make it possible to choose between "Login" or "Framed" service-type Radius ?

     

    Regards

     



  • 2.  RE: Radius Attribute on IAP

    MVP EXPERT
    Posted Jun 15, 2017 05:01 AM

    Hi, what are you trying to achieve? Return a user role based on an attribute?



  • 3.  RE: Radius Attribute on IAP

    Posted Jun 15, 2017 05:03 AM
    Good Morning,

    No, just use this attribute as requirements (fixed in CISCO ISE - we don't have the choice), optional in NPS)

    Regards


  • 4.  RE: Radius Attribute on IAP

    EMPLOYEE
    Posted Jun 16, 2017 10:47 AM

    Mathieu,

     

    It is not clear to me what you are trying to achieve. Are you authenticating wireless clients or administrators or trying to do something else? What authentication methods do you want to use?

     

    Can you post some configuration? Can you post the error messages that you see?

     

    I'm pretty sure that Instant should work with ISE and NPS, but still it is important to know what feature you want to implement in order to help.

     

    You may contact your Aruba partner or Aruba TAC to find out what is preventing you from doing what you want to do.



  • 5.  RE: Radius Attribute on IAP

    EMPLOYEE
    Posted Jun 21, 2017 11:06 AM
    You should open a case with Cisco or Microsoft.

    Both Login and Framed are fully supported by standard and they should support them.