Gradelain, Usually the fallback mechanism isn't tried if the Radius server is available.
Can you check connectivity between the client and server, that the radius server is using the same ports as the client and can you verify the shared key is correct? Also is the filter-id attribute set in the Radius server? I've seen access-accept packet sent by the radius server but if it doesn't contain the correct filter-id string (which can if I remember correctly be case-sensitive or not depending on platform), then the user still isn't able to log in. Regards, Andy NOC Consultant Service Desk: +44 (0)845 850 1177 Number One Paper Mill Drive Church Hill South, Redditch, B98 8QJ Telephone: +44 (0)845 850 5577 -----Original Message----- From: Gradelain Ngouni [mailto:[email protected]] Sent: 03 December 2013 13:57 To: Enterasys Customer Mailing List Subject: [enterasys] C5K Switch admin authentication via Radius Hello Guys, I'm actually running into a simple issue regarding the authentication of the Switch Admin User using the Radius protocol. The Switch is configured to authentication any user on its port including the admin trying to get SSH access to it. The only Problem is that the Switch admin authentication (ssh) is not working, but the fallback(user credential locally configured on the switch) does. I have the AD coupled to the Enterasys NAC. The authentication to other Switches region wide is working, except this C5K175-24 (stack) with the following FW: 06.71.03.0025. therefore, the probability that this might have to do with AD or NAC can be ruled out. Switch was configured on NAC as radius Client. Switch is assign to a policy domain and configured (although not required for the authentication to work) This is actually the Core Switch and only L3 Virtual Interface were configured. And hint? Thanks in advance. Regards Gradelain Gradelain Ngouni Dipl. -Ing. IT-Projektleiter SCALTEL AG Anna-Birle-Str. 2 55252 Mainz-Kastel Telefon +49 6134 50789-23 Telefax +49 (0) 6134 50789-10 [email protected] Rechtsform: Aktiengesellschaft Registergericht: Kempten HRB 7208 Sitz: Waltenhofen Vorstandsvorsitzender: Christian Skala Vorstand: Joachim Skala Aufsichtsratsvorsitzender: Alfons H?rmann SCALTEL-Film: Verschaffen Sie sich einen schnellen ?berblick ?ber unsere Technologien, Dienstleistungen und Services. Mehr dazu erfahren Sie unter: http://www.scaltel.de/technologie-film.html Erleben Sie SCALTEL jetzt auch bei http://www.youtube.com/user/SCALTEL und https://www.xing.com/companies/scaltelag --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected] --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
