Security

 View Only
  • 1.  Aruba CX 4100i Radius Login SSh with OKTA

    Posted Aug 01, 2023 04:42 PM

    I have a customer where i configured the AAA radius for ssh login using OKTA. The customer can see the push notification but he is not getting access to the switch . Below is the configuration. Please, let me know if i am missing anything?

    radius-server host <IP-Address-Omitted> port 1912 key plaintext <key-Omitted>

     

    aaa authentication allow-fail-through
    !
    aaa group server radius OKTA
        server <IP-Address-Omitted> port 1912

     

    !
    aaa authentication login default group OKTA local
    aaa authentication login ssh group OKTA local
    aaa accounting all default start-stop group OKTA
    !
    ip source-interface all interface vlan250



  • 2.  RE: Aruba CX 4100i Radius Login SSh with OKTA

    Posted Aug 01, 2023 06:04 PM

    Forgive my ignorance but can Okta act as a RAIDUS server?  Are you sending RADIUS requests over the internet to Okta?  Why port 1912?  




  • 3.  RE: Aruba CX 4100i Radius Login SSh with OKTA

    Posted Aug 02, 2023 08:47 AM

    The Okta server is local onsite and asked us to use port 1912. Yes, Okta acts as a radius server.




  • 4.  RE: Aruba CX 4100i Radius Login SSh with OKTA

    Posted Dec 13, 2023 12:38 PM

    Were you ever able to get this working for your client?