If you are just using RADIUS for system login, you do not need the "clearpass-username" and "clearpass-password" attributes. Those are for the downloadable user roles function.
------------------------------
If my post was useful, please Accept Solution and Give Kudos.
------------------------------
Zak Chalupka
Principal Engineer - HPE Aruba
ACDX | ACMP | ACSP | ACCP
wifizak@hpe.com------------------------------
Ideas expressed here are solely my own and not necessarily that of HPE Aruba.
------------------------------
Original Message:
Sent: Mar 11, 2024 04:10 PM
From: tsian
Subject: Aruba 8320 does not support login from switch to Clearpass for RADIUS authorization?
Hello,
I am attempting to harden our 8320s used as core switches to require domain login instead of local switch admin login. I have a fleet of 6200F used as edge switches and this works flawlessly using:
switch(config)# radius-server host clearpass.*.* key plaintext secretkey clearpass-username user clearpass-password plaintext password
When I attempt the same on the 8320 switch I get:
Invalid input: clearpass-username
Does the 8320 not support this feature although the 6200F does?
Thank you for taking the time to read. If anyone has any ideas that would be great.