Network Management

 View Only

  • 1.  AAA Authen Radius remote management ip source-interface radius vlan 10

    Posted Feb 23, 2023 12:02 AM
    Edited by manly009 Feb 24, 2023 06:58 PM

    Duplicated please delete



  • 2.  RE: AAA Authen Radius remote management ip source-interface radius vlan 10

    Posted Feb 23, 2023 01:30 AM

    Also, I noticed every time if I used the wrong credentials, the log on the switch will say: 

    I 02/23/23 06:26:55 00421 radius: Can't reach RADIUS server 192.168.0.55

    Is this normal? 

    Thanks a lot,


    Original Message


  • 3.  RE: AAA Authen Radius remote management ip source-interface radius vlan 10

    Posted Feb 23, 2023 06:14 AM

    Do you have multiple IP interfaces on the switch?

    The switch will automatically select the IP interface of the outbound interface by default to reach the RADIUS servers. If you need to change this you need to use the ip source command.

    Regarding the wrong credentials. Is the RADIUS server sending a deny or is it just dropping the authentication request?



    ------------------------------
    William Bargeman
    Systems Engineer Aruba
    ------------------------------

    Original Message


  • 4.  RE: AAA Authen Radius remote management ip source-interface radius vlan 10

    Posted Feb 24, 2023 01:07 AM

    HI Aruba WB @Aruba WB

    I used: 

    radius-server host 10.0.0.221 key "key"
    radius-server host 10.0.0.221 dyn-authorization
    radius-server host 10.0.0.221 time-window 3000


    ip source-interface radius vlan 200

    aaa authentication num-attempts 2
    aaa authentication login privilege-mode
    aaa authentication web login peap-mschapv2 local
    aaa authentication web enable peap-mschapv2 local
    aaa authentication ssh login peap-mschapv2 local
    aaa authentication ssh enable peap-mschapv2 local

    Vlan 200 Managent vlan switch virtual interface

    van 10 server where Radius server is/ Radius server is a different box with DC server. 

    For some reason, web UI cannot authenticate with Radius server: 

    I got this error: 

    W 02/24/23 17:15:44 00419 auth: AM1: Invalid user name/password on WEB-UI
                session User 'unknown' is trying to login from dektop
    W 02/24/23 17:15:10 00419 auth: AM1: Invalid user name/password on WEB-UI
                session User 'unknown' is trying to login from desktop
    I 02/24/23 17:15:05 00421 radius: AM1: Can't reach RADIUS server 10.0.0.221

    Radius server and lab switch is all working fine but switch and server are within the same vlan. 

    Any idea why? 

    ML


    Original Message


  • 5.  RE: AAA Authen Radius remote management ip source-interface radius vlan 10

    Posted Feb 27, 2023 04:20 AM

    You need to make sure that the switch could reach the RADIUS server from the specified VLAN. Do you have multiple IP interfaces on the switch? If yes, is routing configured correctly in the network?



    ------------------------------
    William Bargeman
    Systems Engineer Aruba
    ------------------------------

    Original Message


Related Content