Wired Intelligent Edge (Campus Switching and Routing)

Reply
Highlighted
Occasional Contributor I

Aruba 2930 - Radius setup

Hi all,

 

I'm setting up a 2930 switch in combination with Clearpass.

I applied following config:

 

radius-server host 192.168.1.1 key test
radius-server host 192.168.1.1 dyn-authorization
radius-server host 192.168.1.2 key mhCP6RjWBCsFxRnWXiWRT67yFZOYLgaF
radius-server host 192.168.1.2 dyn-authorization

aaa authentication mac-based chap-radius
aaa authentication port-access eap-radius


aaa port-access authenticator 1/10 unauth-vid 290
aaa port-access mac-based 1/10 unauth-vid 290
aaa port-access authenticator active

 

When I check the Radius requests, i still see 0. Looks like no requests are being sent by the switch. What do I do wrong?

 

Authentication UDP Port : 1812 Accounting UDP Port : 1813
Round Trip Time : 0 Round Trip Time : 0
Pending Requests : 0 Pending Requests : 0
Retransmissions : 0 Retransmissions : 0
Timeouts : 0 Timeouts : 0
Malformed Responses : 0 Malformed Responses : 0
Bad Authenticators : 0 Bad Authenticators : 0
Unknown Types : 0 Unknown Types : 0
Packets Dropped : 0 Packets Dropped : 0
Access Requests : 0 Accounting Requests : 0
Access Challenges : 0 Accounting Responses : 0
Access Accepts : 0
Access Rejects : 0

 

Kind regards,

Guru Elite

Re: Aruba 2930 - Radius setup

Did you follow the ClearPass Solution Guide for Wired Policy Enforcement?

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: Aruba 2930 - Radius setup

You haven't enabled 802.1X and MAC Auth on the ports which are the commands:

 

aaa port-access authenticator 1-7
aaa port-access mac-based 1-7

without any subcommands. As Tim suggested, I would follow that guide as it has all needed commands and best practices in it.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).
Regular Contributor II

Re: Aruba 2930 - Radius setup

Always follow the guide!!

 

It helps you!

 

 

Cheers, Frank
Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744

If you like my posts, kudo's are welcome. If it solves your problem, please click 'Accept as Solution'
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: