Wired Intelligent Edge

 View Only
last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

Aruba 2930 - Radius setup

This thread has been viewed 31 times

  • 1.  Aruba 2930 - Radius setup

    Posted Jul 05, 2018 07:40 AM

    Hi all,

     

    I'm setting up a 2930 switch in combination with Clearpass.

    I applied following config:

     

    radius-server host 192.168.1.1 key test
    radius-server host 192.168.1.1 dyn-authorization
    radius-server host 192.168.1.2 key mhCP6RjWBCsFxRnWXiWRT67yFZOYLgaF
    radius-server host 192.168.1.2 dyn-authorization

    aaa authentication mac-based chap-radius
    aaa authentication port-access eap-radius


    aaa port-access authenticator 1/10 unauth-vid 290
    aaa port-access mac-based 1/10 unauth-vid 290
    aaa port-access authenticator active

     

    When I check the Radius requests, i still see 0. Looks like no requests are being sent by the switch. What do I do wrong?

     

    Authentication UDP Port : 1812 Accounting UDP Port : 1813
    Round Trip Time : 0 Round Trip Time : 0
    Pending Requests : 0 Pending Requests : 0
    Retransmissions : 0 Retransmissions : 0
    Timeouts : 0 Timeouts : 0
    Malformed Responses : 0 Malformed Responses : 0
    Bad Authenticators : 0 Bad Authenticators : 0
    Unknown Types : 0 Unknown Types : 0
    Packets Dropped : 0 Packets Dropped : 0
    Access Requests : 0 Accounting Requests : 0
    Access Challenges : 0 Accounting Responses : 0
    Access Accepts : 0
    Access Rejects : 0

     

    Kind regards,



  • 2.  RE: Aruba 2930 - Radius setup

    EMPLOYEE
    Posted Jul 05, 2018 12:13 PM
    Did you follow the ClearPass Solution Guide for Wired Policy Enforcement?


  • 3.  RE: Aruba 2930 - Radius setup

    EMPLOYEE
    Posted Jul 09, 2018 05:01 AM

    Always follow the guide!!

     

    It helps you!

     

     



  • 4.  RE: Aruba 2930 - Radius setup
    Best Answer

    EMPLOYEE
    Posted Jul 06, 2018 09:16 AM

    You haven't enabled 802.1X and MAC Auth on the ports which are the commands:

     

    aaa port-access authenticator 1-7
aaa port-access mac-based 1-7

    without any subcommands. As Tim suggested, I would follow that guide as it has all needed commands and best practices in it.



  • 5.  RE: Aruba 2930 - Radius setup

    Posted Sep 17, 2021 10:33 AM
    Is the Wired AutoConfig service set to auto start and running on your client PC \ Laptop?

    ------------------------------
    Buffalo Merkis
    ------------------------------

    Original Message