Wired

 View Only
last person joined: yesterday 

AOS-CX 10.7: Port-access Configurable Radius Attributes

This thread has been viewed 35 times
  • 1.  AOS-CX 10.7: Port-access Configurable Radius Attributes

    EMPLOYEE
    Posted Apr 21, 2021 10:07 AM

    AOS-CX 10.7: Port-access Configurable Radius Attributes


    • RADIUS access-request and accounting-request packets are sent to RADIUS server during authentication and accounting of port-access clients, respectively.
    • access-request packets contains various AVPs (Attribute Value Pairs) that carry the information about the NAS and the clients!
    • Example: AVPs include username, NAS identifier (host name) etc
    • Tunnel-private-group-id, (Type 81, RFC 2868)
    • NAS-ID (user defined value, currently it is hostname)

    Required AOS-CX Configuration






    Required Clearpass Configuration


    Observe incoming access-request on clearpass for a mac-auth client request - both configurable Radius Attributes: tunnel-private-id & nas-id as below:


    Please download AOS-CX 10.7 and give try! 

    https://asp.arubanetworks.com/downloads;products=Aruba%20Switches


    Have a good day!

    ------------------------------
    Yash NN
    ------------------------------